PatchTheCVECVE-2026-27750: Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component
CVE-2026-27750 is a high-severity flaw (CVSS 7.8) affecting internet security. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target path. A local attacker can replace a previously scanned directory with a junction or reparse point before deletion occurs, causing the privileged proc
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.1% (top 99%) |
| CISA exploited list | No |
| Weakness | CWE-367 |
| Published | 2026-03-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-27750?
internet security: upgrade to 1.1.114.3113. Exact commands for each OS are on this page.
Is CVE-2026-27750 being exploited?
CVE-2026-27750 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-27750 affect?
CVE-2026-27750 affects internet security. Severity is high (CVSS 7.8). Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them duri
How urgent is CVE-2026-27750?
Priority 28/100. High severity
Related CVEs
- CVE-2025-7073 HIGH 7.8 UPGRADE UPGRADE A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows
- CVE-2026-6851 HIGH 7.0 UPGRADE UPGRADE An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as
- CVE-2026-27749 HIGH 7.8 UPGRADE Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup compo
- CVE-2026-27748 HIGH 7.8 UPGRADE Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component
- CVE-2025-7098 MEDIUM 5.6 DOWNGRADE A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162