CVE-2022-4173: Avast

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10.

Affected products

• Avast Avast: from 20.5, up to and including 22.9
• Avast Avg Antivirus: from 20.5, up to and including 22.9

Published 2022-12-06. Last modified 2026-06-17.