---
id: 4321
title: "Avira: Deserialize, Delete and Escalate - The Proper Way to Use an AV"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/avira-deserialize-delete-and-escalate-the-proper-way-to-use-an-av.html"
published_at: "2026-03-02 23:00"
tags: ["vulnerability-research", "privilege-escalation", "deserialization", "windows-security", "windows", "antivirus", "toctou", "avira"]
phying_url: "https://phying.com/item/4321"
lang: en
---

# Avira: Deserialize, Delete and Escalate - The Proper Way to Use an AV

## Summary

Quarkslab details three Avira Internet Security flaws — arbitrary file delete (CVE-2026-27748), insecure deserialization (CVE-2026-27749) and a TOCTOU folder delete — two escalate to SYSTEM.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2026-03-02 23:00
- **Original:** https://blog.quarkslab.com/avira-deserialize-delete-and-escalate-the-proper-way-to-use-an-av.html
- **Phying News:** https://phying.com/item/4321