Gen Digital vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-6064 Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows aHigh 7.3 · Oct 28, 2026
• CVE-2026-82964 Improper preservation of permissions in the Avast sandbox minifilter driver (aswSnx.sys) on Windows allows a local, low-privileged attacker executing inside theHigh 8.8 · Sep 16, 2026
• CVE-2026-12410 Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privilegHigh 7.8 · Aug 5, 2026
• CVE-2026-6676 Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-High 7.8 · Jun 12, 2026
• CVE-2026-12068 Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may allow a remote attacker operating a cross-origin iframe to obtHigh 7.4 · Jun 12, 2026
• CVE-2025-9033 Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-ServiceHigh 7.8 · Jun 12, 2026
• CVE-2025-9032 Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-High 7.8 · Jun 12, 2026
• CVE-2025-14098 Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow LocalHigh 7.8 · Jun 12, 2026
• CVE-2025-7017 Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-ofHigh 7.8 · Jun 12, 2026
• CVE-2025-7011 Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of Code or Denial-of-ServicHigh 7.8 · Jun 12, 2026
• CVE-2025-7009 Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-ServiceHigh 7.8 · Jun 12, 2026
• CVE-2025-7008 Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET metadata may allow Local Execution of Code oHigh 7.8 · Jun 12, 2026
• CVE-2025-7004 Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-ServicHigh 7.8 · Jun 12, 2026
• CVE-2025-7003 Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-ServiceHigh 7.8 · Jun 12, 2026
• CVE-2025-7002 Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-ServiceHigh 7.8 · Jun 12, 2026
• CVE-2025-58074 A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store.High 8.8 · May 4, 2026
• CVE-2026-27750 Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component.High 7.8 · Mar 5, 2026
• CVE-2026-27749 Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component.High 7.8 · Mar 5, 2026
• CVE-2026-27748 Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component.High 7.8 · Mar 5, 2026
• CVE-2025-8351 Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or DeniaHigh 7.8 · Dec 1, 2025
• CVE-2025-10101 Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Mach-O file may allow Local Execution of Code or Denial-of-Service of High 7.8 · Dec 1, 2025
• CVE-2025-3025 Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploitiHigh 7.3 · Sep 15, 2025