CVE-2022-4294: Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation
First published: Tue Jan 10 2023(Updated: )
Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
Credit: security@nortonlifelock.com security@nortonlifelock.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Avira Internet Security Suite | <1.1.78 | |
| Symantec Norton Power Eraser | <119.1.5.1 | |
| All of | ||
| Any of | ||
| Avast Antivirus | <22.10 | |
| AVG Antivirus Plus Firewall | <22.10 | |
| Microsoft Windows | ||
| Avast Antivirus | <22.10 | |
| AVG Antivirus Plus Firewall | <22.10 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-4294.
What is the severity level of CVE-2022-4294?
The severity level of CVE-2022-4294 is high (7.8).
Which antivirus software for Windows are affected by CVE-2022-4294?
Norton, Avira, Avast, and AVG Antivirus for Windows are affected by CVE-2022-4294.
What is Privilege Escalation vulnerability?
Privilege Escalation vulnerability is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
How can I fix CVE-2022-4294 vulnerability?
To fix CVE-2022-4294 vulnerability, it is recommended to update the affected antivirus software to the latest version provided by the vendor.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/severity
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/avira
- canonical/avira internet security suite
- vendor/norton
- canonical/symantec norton power eraser
- vendor/avast
- canonical/avast antivirus
- vendor/avg
- canonical/avg antivirus plus firewall
- vendor/microsoft
- canonical/microsoft windows