CVE-2022-3368

—

CVSS 3.1

8.8 high

EPSS

<1%p57

Published

Oct 17, 2022 (Oct 17, 2022)

Modified

Jun 17, 2026

Description

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556.

Vendors: avira
Products: avira security
Weakness: CWE-276
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.