CVE-2026-6064
CVE-2026-6064 · Norton, Avast, and AVG local privilege escalation via link following in Data Shredder
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\SYSTEM privelages.
CVSS 7.3 · High · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
norton antivirus
- Versions
- ≥ 0, < 26.5: Affected (custom)
Update to 26.5
avast antivirus
- Versions
- ≥ 0, < 26.5: Affected (custom)
Update to 26.5
avg internet security
- Versions
- ≥ 0, < 26.5: Affected (custom)
Update to 26.5