Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Avira: Deserialize, Delete and Escalate - The Proper Way to Use an AV

blog.quarkslab.com | research | #vulnerability-research | #privilege-escalation | #deserialization | #windows-security | #windows | #antivirus | #toctou | #avira

Summary

Quarkslab details three Avira Internet Security flaws — arbitrary file delete (CVE-2026-27748), insecure deserialization (CVE-2026-27749) and a TOCTOU folder delete — two escalate to SYSTEM.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-66804 PoC: Windows Cross Device virtual camera local privilege escalation to SYSTEM (github.com)
  2. CVE-2026-50656 PoC: Microsoft Defender RoguePlanet elevation-of-privilege patch bypass (github.com)
  3. CVE-2026-42980 PoC: Windows kernel WMI integer underflow local privilege escalation (github.com)
  4. Milking the last drop of Intego - Time for Windows to get its LPE (blog.quarkslab.com)
  5. Intego X9: Never trust my updates (blog.quarkslab.com)
  6. Windows Privilege Abuse: How Attackers Escalate from Accounts with Dangerous Rights to Active Directory Compromise (semperis.com)

back