PT-2026-128093

CVE-2026-6064

·

Published

2026-10-28

·

Updated

2026-10-28

Description by

CVSS 3.1
7.3
High
MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Norton Antivirus versions prior to 26.5.10933 Avast Antivirus versions prior to 26.5.10933 AVG Internet Security versions prior to 26.5.10933
Description A link following issue exists in the Data Shredder components, specifically within the avgToolsSvc service. A local, low-privileged attacker can exploit this during a privileged shred operation to enable arbitrary file or folder deletion, allowing the attacker to escalate privileges to SYSTEM.
Recommendations Update Norton Antivirus to version 26.5.10933 or later. Update Avast Antivirus to version 26.5.10933 or later. Update AVG Internet Security to version 26.5.10933 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-26-832
Found an issue in the description? Have something to add? Feel free to write us 👾