CVE-2022-28965: Avast Premium Security

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast Premium Security before v21.11.2500 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted DLL file.

Affected products

• Avast Premium Security: before 21.11.2500 (fixed in 21.11.2500)

Published 2022-05-20. Last modified 2026-06-17.