title: Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation
description: Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
problem types: CWE-269 Improper Privilege Management
affected:
{
defaultStatus: unaffected
platforms: Windows
product: Norton Antivirus Windows Eraser Engine
vendor: NortonLifelock (GenDigital)
versions:
status: affected, version: prior to 119.1.5.1
}
{
defaultStatus: unaffected
platforms: Windows
product: Avira Security
vendor: NortonLifelock (GenDigital)
versions:
status: affected, version: prior to 1.1.78
}
{
defaultStatus: unaffected
platforms: Windows
product: Avast Antivirus
vendor: NortonLifelock (GenDigital)
versions:
status: affected, version: Prior to 22.10
}
{
defaultStatus: unaffected
platforms: Windows
product: AVG Antivirus
vendor: NortonLifelock (GenDigital)
versions:
status: affected, version: Prior to 22.10
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL