Description
Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\SYSTEM privelages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Gen Digital | Norton Antivirus | < 26.5 | 26.5 |
| Gen Digital | Avast Antivirus | < 26.5 | 26.5 |
| Gen Digital | AVG Internet Security | < 26.5 | 26.5 |
Advisories 1
- WID-SEC-2026-4235 Norton Antivirus: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Oct 28, 2026