Avira Free Security Suite vulnerabilities

2 CVEs affecting Avira Free Security Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-11396, published 2019-08-29.

More from Avira.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-6417, published 2017-03-21. Medium severity, CVSS 6.7. EPSS: 0.9% chance of exploitation in the next 30 days. Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suite 15.0 (and earlier), and Free Security Suite 15.0 (and…
• CVE-2019-11396, published 2019-08-29. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder (files / folders and configuration) are incompatible with the privileged file…