Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2020-12463: An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary f...
CVE-2020-12463 · published 6 years ago
Summary
An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.
What to do
- Update avira software_updater to version 2.0.6.27476 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| avira | software_updater |
< 2.0.6.27476 cpe:2.3:a:avira:software_updater:*:*:*:*:*:*:*:* |
Original advisory text
An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary f...
An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.
References
- https://support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater Release Notes Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published5 May 2020
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-12463 · NVD
Track software like this
Free during beta