medium6.5
CVE-2023-1585
Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file…
Impact
Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avast | Antivirus | from 22.5 before 22.11 |
| Avg | Anti-Virus | from 22.5 before 22.11 |