PT-2026-128093
CVE-2026-6064
·
Published
2026-10-28
·
Updated
2026-10-28
Description by
CVSS 3.1
7.3
HighMetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Norton Antivirus versions prior to 26.5.10933
Avast Antivirus versions prior to 26.5.10933
AVG Internet Security versions prior to 26.5.10933
Description
A link following issue exists in the Data Shredder components, specifically within the
avgToolsSvc service. A local, low-privileged attacker can exploit this during a privileged shred operation to enable arbitrary file or folder deletion, allowing the attacker to escalate privileges to SYSTEM.Recommendations
Update Norton Antivirus to version 26.5.10933 or later.
Update Avast Antivirus to version 26.5.10933 or later.
Update AVG Internet Security to version 26.5.10933 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾