Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-1585

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later.

Published

2023-04-19T19:15:06.630

Last Modified

2024-11-21T07:39:29.617

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-367
  • Type: Primary
    CWE-367
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application avast antivirus < 22.11 Yes
Application avg anti-virus < 22.11 Yes
Operating System microsoft windows - No
References