Skip to content
OpenAdvisories
High WID-SEC-2026-0618 3 CVEs

Avira Internet Security Suite: Mehrere Schwachstellen

Published Mar 5, 2026 · Updated Mar 5, 2026 · de-DE

Vendor: AVIRA Product: Internet Security Suite Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Avira Internet Security Suite ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Code mit Administratorrechten auszuführen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.

Product

Avira Internet Security Suite ist ein Antivirenprodukt zur Entdeckung und Verhinderung der Ausführung von Schadcode.

Vulnerabilities 3

  • High 7.8
    CVE-2026-27748

    Avira Internet Security Arbitrary File Deletion via Improper Link Resolution

    Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\\ProgramData without validating whether the path resolves t…

    Gen Digital Avira Internet Security
  • High 7.8
    CVE-2026-27749

    Avira Internet Security System Speedup Insecure Deserialization

    Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file located in C:\\ProgramD…

    Gen Digital Avira Internet Security
  • High 7.8
    CVE-2026-27750

    Avira Internet Security Optimizer TOCTOU

    Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate clean…

    Gen Digital Avira Internet Security

Revision history

  1. #1

    Initiale Fassung

References