CVE-2022-4173

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 22.10 AVG Anti-Virus versions prior to 22.10

Description The issue is related to insecure privilege management within the malware removal functionality of Avast and AVG Antivirus. An attacker with write access to the filesystem can exploit this to escalate their privileges in certain scenarios.

Recommendations For Avast Antivirus versions prior to 22.10, update to version 22.10 to resolve the issue. For AVG Anti-Virus versions prior to 22.10, update to version 22.10 to resolve the issue. As a temporary workaround, consider restricting write access to the filesystem to minimize the risk of exploitation.