avast_antivirus_avast_one_avast_premium_security_avast_ultimate vulnerabilities
CVEs whose affected-version data names the avast_antivirus_avast_one_avast_premium_security_avast_ultimate package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-80303NoneAvast WFP stream parser integer underflow causes system crash
An integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows allows denial of service by causing a system crash. The WFP callout driver processes network stream data and computes length val…
CVE-2026-80302NoneAvast sandbox escape via arbitrary file write in virtualized environment
Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker executing inside the sandbox to write arbitrary files outside sandbox containment and execute code on the host. T…
CVE-2026-80301NoneAvast sandbox escape via unpreserved COM pathway through Task Scheduler
Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox to access COM interfaces to the Task Scheduler service, escape containment, and execute code with elevated privileges…