← Vulnerability feed

Vulnerability record · CVE-2022-4294 · published 10 January 2023

CVE-2022-4294: Avira security improper privilege management vulnerability

Avira · Avira Security

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

7.8 CVSS 3.1 High EPSS 0.19% · top 92.3% CWE-269 · Improper privilege management
7.8CVSS 3.1 base score
0.19%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.norton.com/sp/static/external/tools/security-advisories.html Vendor Advisory
https://support.norton.com/sp/static/external/tools/security-advisories.html Vendor Advisory

Track CVE-2022-4294 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-3500Avast antivirus integer overflow vulnerabilityInteger Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: fro…EPSS 0.46%9.8CVE-2020-10867Avast antivirus exposure of resource to wrong sphere vulnerabilityAn issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows atta…EPSS 2.2%9.8CVE-2017-8307Avast antivirus vulnerabilityIn Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries,…EPSS 1.8%9.3CVE-2008-5522Avg antivirus improper input validation vulnerabilityAVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placin…EPSS 2.9%8.8CVE-2022-3368Avira security incorrect default permissions vulnerabilityA vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to e…EPSS 0.90%8.8CVE-2021-45335Avast antivirus incorrect default permissions vulnerabilitySandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, an…EPSS 0.38%8.8CVE-2021-45336Avast antivirus vulnerabilityPrivilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed code to gain elevated privilege…EPSS 0.46%8.8CVE-2021-45337Avast antivirus vulnerabilityPrivilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with SYSTEM privileges to gain ele…EPSS 0.43%

Source: NIST National Vulnerability Database (record CVE-2022-4294), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.