CVE-2019-17449: Avira Software Updater

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerability is invalid because exploiting it would require at least administrator privileges and would gain only SYSTEM privileges

Affected products

• Avira Software Updater: before 2.0.6.21094 (fixed in 2.0.6.21094)

Published 2019-10-10. Last modified 2026-06-17.