Free antivirus

This hub aggregates every CVE we track for Free antivirus, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Free antivirus.

• CVE-2025-10905Collision in minifilter driver of Avast Free Antivirus results in disabling of real-time protection4.4Nov 11, 2025
• CVE-2024-7233Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability7.8Nov 22, 2024
• CVE-2024-7232Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability7.8Nov 22, 2024
• CVE-2024-7227Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability7.8Nov 22, 2024
• CVE-2024-7228Avast Free Antivirus Link Following Denial-of-Service Vulnerability5.5Nov 22, 2024
• CVE-2021-34998This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker must first obtain the ability to execute low-privil...7.8Jan 13, 2022
• CVE-2020-13657An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control...5.5Jun 29, 2020
• CVE-2020-12680Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user credentials. The functions of the executable file Avira.PWM.NativeMessaging.exe are aimed at collecting credentials s...5.5May 8, 2020
• CVE-2020-8961An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to ...9.8Apr 9, 2020
• CVE-2019-18568Avira Free Antivirus is proned to a local privilege escalation through the execution of kernel code from a restricted user.8.8Dec 31, 2019
• CVE-2018-12572Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing ...7.8Mar 17, 2019
• CVE-2017-5567Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12.3 (and earlier) allows a local attack...6.7Mar 21, 2017
• CVE-2016-4025Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Pro...5.5Nov 3, 2016