Skip to content
OpenAdvisories
Medium WID-SEC-2026-1937 9 CVEs

Avira AntiVirus: Mehrere Schwachstellen

Published Jun 15, 2026 · Updated Jun 15, 2026 · de-DE

Vendor: AVIRA Product: AntiVirus Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Avira AntiVirus ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.

Product

Avira AntiVirus ist eine Anti-Virus Lösung.

Vulnerabilities 9

  • High 7.8
    CVE-2025-14098

    Avira antivirus engine heap buffer OOB write when scanning a malformed MS-DOS executable file

    Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira A…

    Gen Digital Avira Antivirus
  • High 7.8
    CVE-2025-7002

    Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 2)

    Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux f…

    Gen Digital Avira Antivirus
  • High 7.8
    CVE-2025-7003

    Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 1)

    Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux f…

    Gen Digital Avira Antivirus
  • High 7.8
    CVE-2025-7017

    Avira antivirus engine heap buffer OOB read when scanning a malformed Windows MSI file

    Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and…

    Gen Digital Avira Antivirus
  • High 7.8
    CVE-2025-9032

    Avira antivirus engine heap buffer OOB read when scanning a malformed PE file

    Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and …

    Gen Digital Avira Antivirus
  • High 7.8
    CVE-2025-9033

    Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 3)

    Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux f…

    Gen Digital Avira Antivirus
  • High 7.8
    CVE-2026-6676

    Avira antivirus engine heap buffer OOB write when scanning a malformed POSIX tar archive

    Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, a…

    Gen Digital Avira Antivirus
  • High 7.4
    CVE-2026-12068

    Avira Password Manager credential disclosure via cross-origin autofill in Firefox

    Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may allow a remote attacker operating a cross-origin iframe to obtain credentials autofilled for the parent web page via incorrect autofill field selection. This iss…

    Gen Digital Avira Password Manager
  • Medium 5.5
    CVE-2025-7018

    Avira antivirus engine null pointer dereference when scanning a malformed PE file

    Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.…

    Gen Digital Avira Antivirus

Revision history

  1. #1

    Initiale Fassung

References