Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

AVG/Avast Antivirus: Local Privilege Escalation via COM Hijack

CVE-2024-5803 · published 2 years ago
Summary

A known vulnerability in AVG/Avast Antivirus versions prior to 24.1 allows a local attacker to potentially gain elevated privileges. This can happen when the antivirus software's self-protection is disabled, allowing an attacker to exploit a security weakness. Update to version 24.1 or later to fix this issue.

Original advisory text
The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection ...
The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection is disabled.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition
Timeline
Published3 Oct 2024
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-5803 · NVD
Track software like this
Free during beta