CVE-2025-71326

Name of the Vulnerable Software and Affected Versions AVAST Antivirus version 25.11

Description The SecureLine service contains an unquoted service path, which occurs when a service executable path contains spaces and is not enclosed in quotation marks. This allows local non-privileged users to execute code with elevated SYSTEM privileges by injecting malicious executables into the service configuration path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.