CVE Feed

    Dashboard / CVE / CVE-2026-6064

    CVE-2026-6064

    Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\SYSTEM privelages.

    Published:Oct 28, 2026
    Last Modified:Oct 28, 2026
    EPS:Oct 28, 2026
    EPSS Score:
    CVSS Score:7.3

    Affected Products

    Vendor
    Gen Digital
    Product
    Avast Antivirus
    Vendor
    Gen Digital
    Product
    Avg Internet Security
    Vendor
    Gen Digital
    Product
    Norton Antivirus

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-7019 (CVSS 5.5) — Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denia…
    CVE-2025-7011 (CVSS 7.8) — Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may…
    CVE-2025-7010 (CVSS 5.5) — Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF fi…
    CVE-2025-7009 (CVSS 7.8) — Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may …
    CVE-2025-7008 (CVSS 7.8) — Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with…
    CVE-2025-7006 (CVSS 5.5) — Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows PE file may …
    CVE-2025-7005 (CVSS 5.5) — Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow De…
    CVE-2025-7004 (CVSS 7.8) — Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High