CVE-2020-10861: avast antivirus
Vulnerability summary
CVE-2020-10861 is a high (CVSS 7.5) vulnerability in avast antivirus. EPSS estimates a 1.69% chance of exploitation in the next 30 days, higher than 76.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 01-04-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Arbitrary File Deletion from Avast Program Path via RPC, when Self Defense is Enabled.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.69%
Chance of exploitation in the next 30 days
Percentile
77%
Versus all other CVEs
30-day change
0.00 pp
From 1.69% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundAvast Multiple Vulnerability Disclosure
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Avast1 product
- antivirus< 20.0
1 vendor · 1 product
References
3 links- github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.mdX Refsource MISCExploitThird Party Advisory