PatchTheCVECVE-2026-27749: Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup compo
CVE-2026-27749 is a high-severity flaw (CVSS 7.8) affecting internet security. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file located in C:\\ProgramData using .NET BinaryFormatter without implementing input validation or deserialization safeguards. Because the file can be created or modified by a local user in default configurations, an a
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 73%) |
| CISA exploited list | No |
| Weakness | CWE-502 |
| Published | 2026-03-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-27749?
internet security: upgrade to 1.1.114.3113. Exact commands for each OS are on this page.
Is CVE-2026-27749 being exploited?
CVE-2026-27749 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-27749 affect?
CVE-2026-27749 affects internet security. Severity is high (CVSS 7.8). Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file loca
How urgent is CVE-2026-27749?
Priority 34/100. High severity
Related CVEs
- CVE-2025-7073 HIGH 7.8 UPGRADE UPGRADE A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows
- CVE-2026-6851 HIGH 7.0 UPGRADE UPGRADE An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as
- CVE-2026-27750 HIGH 7.8 UPGRADE Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component
- CVE-2026-27748 HIGH 7.8 UPGRADE Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component
- CVE-2025-7098 MEDIUM 5.6 DOWNGRADE A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162