Skip to content
OpenAdvisories
High WID-SEC-2023-2496 2 CVEs

Avast Premium Security: Mehrere Schwachstellen

Published Sep 27, 2023 · Updated Sep 27, 2023 · de-DE

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Avast Premium Security ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.

Product

Avast Premium Security bietet einen umfassenden Schutz für Computer, Smartphones und Tablets.

Vulnerabilities 2

  • High 8.8

    Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability

    Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerabilit…

  • Medium 5.3

    Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability

    Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Premium Security. An attacker must first obtain the abili…

Revision history

  1. #1

    Initiale Fassung

References