CVE-2020-12463

—

CVSS 3.1

7.8 high

EPSS

<1%p38

Published

May 5, 2020 (May 5, 2020)

Modified

Jun 17, 2026

Description

An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.

Vendors: avira
Products: software updater
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.