Avira maintains a portfolio of antivirus and security products, with a modest but established presence in the consumer and small-business endpoint-protection market. The vendor's vulnerability disclosures cluster around a small set of core products including Antivir, Antivirus, and Avira Security, reflecting a focused rather than sprawling product line. The recurring weakness classes span both configuration and implementation issues—link-following flaws, cleartext transmission of credentials and sensitive data, and race conditions in concurrent operations—patterns typical of user-facing security software where trust boundaries and inter-process communication require careful handling. Defenders should monitor this vendor's releases for endpoint deployments where Avira products are in use, particularly for cleartext-transmission and local-privilege-escalation vectors. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Avira over time
Signals from CVEs in this vendor scope (41 CVEs).
41 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2012-1459MEDIUM The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10 | Mar 21, 2012 | 4.3 | 71 | NO | NO |
CVE-2012-1457MEDIUM The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka | Mar 21, 2012 | 4.3 | 70 | NO | NO |
CVE-2012-1443MEDIUM The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protectio | Mar 21, 2012 | 4.3 | 69 | NO | NO |
CVE-2012-1425MEDIUM The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikar | Mar 21, 2012 | 4.3 | 65 | NO | NO |
CVE-2015-7303HIGH Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via a large header. | Sep 21, 2015 | 10.0 | 48 | NO | NO |
CVE-2020-8961CRITICAL An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injectio | Apr 9, 2020 | 9.8 | 31 | NO | NO |
CVE-2022-3368HIGH A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certa | Oct 17, 2022 | 8.8 | 28 | NO | NO |
CVE-2016-10402HIGH Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, ca | Jul 27, 2017 | 7.8 | 28 | NO | NO |
CVE-2019-18568HIGH Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a restricted user. | Dec 31, 2019 | 8.8 | 27 | NO | NO |
CVE-2007-2974HIGH Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting | Jun 1, 2007 | 10.0 | 27 | NO | NO |
Signals from CVEs in this vendor scope (41 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Avira.
Media articles that mention a CVE ID that affects a product developed by Avira — matched by CVE ID, not by vendor name.