Avast vulnerabilitiesNone on the known-exploited list.
Avast has 73 published vulnerabilities across 34 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Antivirus, with 30. If you run Avast software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Avast products have the most vulnerabilities?
Antivirus leads with 30 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Avast vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Avast's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Avast flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 7.9%CVE-2016-3986High
Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing.
- 7.8%CVE-2010-3126Critical
Untrusted search path vulnerability in avast!
- 6.3%CVE-2007-2845Critical
Heap-based buffer overflow in the CAB unpacker in avast!
- 3.7%CVE-2008-6846Medium
Multiple stack-based buffer overflows in avast!
- 3.2%CVE-2007-1672High
avast! antivirus before 4.7.981 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
- 3.2%CVE-2007-1673High
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.
- 3.0%CVE-2015-5662Medium
Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP archive.
- 2.9%CVE-2008-5523Critical
avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying...
- 2.6%CVE-2020-23907Critical
An issue was discovered in retdec v3.3. In function canSplitFunctionOn() of ir_modifications.cpp, there is a possible out of bounds read due to a heap buffer overflow.
- 2.2%CVE-2020-10867Critical
An issue was discovered in Avast Antivirus before 20.
All Avast products we track.
32 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Antivirusantivirus30 vulnerabilities63 versions
- Avast Antivirus Homeavast_antivirus_home8 vulnerabilities23 versions
- Avast Antivirus Professionalavast_antivirus_professional8 vulnerabilities23 versions
- Free Antivirusfree_antivirus8 vulnerabilities52 versions
- Avast Antivirusavast_antivirus6 vulnerabilities7 versions
- Premium Securitypremium_security6 vulnerabilities4 versions
- Avg Antivirusavg_antivirus3 vulnerabilities4 versions
- Cleanup Premiumcleanup_premium3 vulnerabilities1 version
- Internet Securityinternet_security2 vulnerabilities7 versions
- Premierpremier2 vulnerabilities7 versions
- Pro Antiviruspro_antivirus2 vulnerabilities7 versions
- Secure Browsersecure_browser2 vulnerabilities49 versions
- Antitrackantitrack1 vulnerability1 version
- Antivirus for Linuxantivirus_for_linux1 vulnerability1 version
- Antivirus Proantivirus_pro1 vulnerability1 version
- Antivirus Pro Plusantivirus_pro_plus1 vulnerability1 version
- Avast Antivirus Freeavast_antivirus_free1 vulnerability1 version
- Avast Free Antivirusavast_free_antivirus1 vulnerability1 version
- Avast Internet Securityavast_internet_security1 vulnerability1 version
- Avast Premieravast_premier1 vulnerability1 version
- Avast Pro Antivirusavast_pro_antivirus1 vulnerability1 version
- Avast! Mobile Securityavast\!_mobile_security1 vulnerability1 version
- Avg Antitrackavg_antitrack1 vulnerability1 version
- Business Securitybusiness_security1 vulnerability6 versions
This directory lists the 32 Avast products with at least one tracked version, of 34 in our catalogue.
Running Avast? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing.
- Matched to
- Avast on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 73 published vulnerabilities across 34 products and 282 versions from Avast.
None of Avast's vulnerabilities is on the list of flaws known to be exploited today.
Antivirus, with 30 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Avast products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.