CVE-2021-45337: Avast Antivirus

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with SYSTEM privileges to gain elevated privileges by "hollowing" process wsc_proxy.exe which could lead to acquire antimalware (AM-PPL) protection.

Affected products

• Avast Antivirus: before 20.8 (fixed in 20.8)

Published 2021-12-27. Last modified 2026-06-17.