ZDI-CAN-26610: ZDI-25-256: Avast Free Antivirus Integer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-3500.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-26610?
The ZDI-CAN-26610 vulnerability has a critical CVSS rating due to its ability to allow privilege escalation on affected systems.
How do I fix ZDI-CAN-26610?
To fix ZDI-CAN-26610, users should update their Avast Free Antivirus to the latest version provided by the vendor.
Who is affected by ZDI-CAN-26610?
ZDI-CAN-26610 affects users of Avast Free Antivirus who have not applied the necessary security updates.
What type of exploit is involved in ZDI-CAN-26610?
ZDI-CAN-26610 involves a local code execution exploit that allows attackers to escalate their privileges.
What should I do if I cannot update Avast Free Antivirus due to ZDI-CAN-26610?
If you cannot update Avast Free Antivirus, consider temporarily disabling it and running alternative security measures until the update can be applied.