avast antivirus

Name: avast antivirus
Brand: avast

productUS

cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical17high12medium0low

updated 2026-10-27

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-3500US	critical9.8	0.46% (40th)	Exploit	25.3	2025-12-01	25.1.981.6 → 25.3
CVE-2020-10867US	critical9.8	2.22% (83rd)	—	20.0	2020-04-01	< 20.0
CVE-2020-10863US	high7.5	2.08% (81st)	—	20.0	2020-04-01	< 20.0
CVE-2020-10860US	high7.5	2.08% (81st)	—	20.0	2020-04-01	< 20.0
CVE-2017-8307US	critical9.8	1.78% (78th)	—	no fix	2017-04-27	≤ 12.3.2279
CVE-2020-10868US	high7.5	1.69% (77th)	—	20.0	2020-04-01	< 20.0
CVE-2020-10865US	high7.5	1.69% (77th)	—	20.0	2020-04-01	< 20.0
CVE-2020-10861US	high7.5	1.69% (77th)	—	20.0	2020-04-01	< 20.0
CVE-2020-10864US	medium6.5	1.65% (76th)	—	20.0	2020-04-01	< 20.0
CVE-2017-8308US	high7.5	1.46% (73rd)	—	no fix	2017-04-27	≤ 12.3.2279
CVE-2020-10866US	high7.5	1.20% (68th)	—	20.0	2020-04-01	< 20.0
CVE-2019-18653US	medium6.1	0.85% (58th)	—	no fix	2019-11-01	= 19.3.2369
CVE-2019-17093US	high7.8	0.55% (46th)	—	19.8	2019-10-23	< 19.8
CVE-2019-11230US	medium4.4	0.54% (45th)	—	19.4	2019-07-18	< 19.4
CVE-2020-10862US	high7.8	0.50% (43rd)	—	20.0	2020-04-01	< 20.0
CVE-2021-45336US	high8.8	0.47% (41st)	—	20.4	2021-12-27	< 20.4
CVE-2021-45337US	high8.8	0.45% (39th)	—	20.8	2021-12-27	< 20.8
CVE-2021-45338US	high7.8OT elevated	0.39% (33rd)	—	20.4	2021-12-27	< 20.4
CVE-2021-45335US	high8.8OT elevated	0.39% (33rd)	—	20.4	2021-12-27	< 20.4
CVE-2021-45339US	high7.8OT elevated	0.33% (26th)	—	20.4	2021-12-27	< 20.4
CVE-2020-15024US	medium5.5	0.32% (25th)	—	no fix	2020-09-10	= 20.1.5069.562
CVE-2025-13032US	high7.8	0.25% (16th)	—	25.3	2025-11-11	< 25.3
CVE-2024-5102US	high7.0	0.22% (13th)	—	24.2	2024-06-10	< 24.2
CVE-2023-1587US	medium5.5	0.21% (11th)	—	22.11	2023-04-19	22.5 → 22.11
CVE-2023-1586US	medium4.7	0.21% (11th)	—	22.11	2023-04-19	22.5 → 22.11
CVE-2022-4294US	high7.8	0.19% (9th)	—	22.10	2023-01-10	< 22.10
CVE-2023-1585US	medium6.3	0.17% (6th)	—	22.11	2023-04-19	22.5 → 22.11
CVE-2020-20118US	medium5.5	0.17% (6th)	—	19.7	2023-07-11	< 19.7
CVE-2024-9484US	medium5.5	0.13% (3rd)	—	24092400	2024-10-04	< 24092400
CVE-2024-9483US	medium5.5	0.13% (3rd)	—	24092400	2024-10-04	< 24092400
CVE-2024-9482US	medium5.5	0.13% (3rd)	—	24092400	2024-10-04	< 24092400
CVE-2024-9481US	medium5.5	0.13% (3rd)	—	24092400	2024-10-04	< 24092400

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management9 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition4 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-276Incorrect Default Permissions2 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-1284Improper Validation of Specified Quantity in Input1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan