Avast Secure Browser vulnerabilities

2 CVEs affecting Avast Secure Browser, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-17190, published 2020-01-27.

More from Avast.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-18893, published 2020-01-13. Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days. XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.77 allows websites to execute their code in the context of this component. While…
• CVE-2019-17190, published 2020-01-27. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe (which is running as NT…