CVE-2019-17093

CVE-2019-17093 is a DLL Preloading vulnerability affecting Avast and AVG antivirus products before version 19.8. An attacker can implant a malicious wbemcomn.dll, which is then loaded into a protected-light process (PPL), potentially bypassing self-defense mechanisms. This vulnerability carries a high CVSS score of 7.8, indicating a local attack vector with low complexity, and a high impact on confidentiality, integrity, and availability. While there is no known active exploitation or publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, suggesting awareness among security researchers. It is not listed on the CISA KEV catalog.