CVE-2016-4025

—

CVSS 3.0

5.5 medium

EPSS

<1%p33

Published

Nov 3, 2016 (Nov 3, 2016)

Modified

Jun 17, 2026

Description

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call.

Vendors: avast
Products: business security, free antivirus, internet security, premier, pro antivirus, email server security, endpoint protection, endpoint protection plus, endpoint protection suite, endpoint protection suite plus, file server security
Weakness: CWE-254
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.