CyberSecBulletin

NortonLifeLock vulnerabilities

We track 3 vulnerabilities in NortonLifeLock products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 8, 2022.

3vulnerabilities
1critical
2high
0exploited
9.2average CVSS score

Latest NortonLifeLock vulnerabilities

  • 10.0 Critical severity

    Avast Antivirus: Out-of-bounds Write

    CVE-2022-4291NortonLifeLock

    The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue was fixed in version 18

  • 8.8 High severity

    Avast and AVG Antivirus: Improper Privilege Management

    CVE-2022-4173NortonLifeLock

    A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10.

  • 8.8 High severity

    "Avira Security" – for Windows: Incorrect Default Permissions

    CVE-2022-3368NortonLifeLockEPSS 1.09%

    A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556.