PatchTheCVEavira vulnerabilities
Recent CVEs affecting avira products. 4 tracked.
avira has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-03-05. Highest priority: CVE-2023-51636 (score 43/100).
- CVE-2026-27750 HIGH 7.8 UPGRADE Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component
- CVE-2026-27749 HIGH 7.8 UPGRADE Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup compo
- CVE-2026-27748 HIGH 7.8 UPGRADE Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component
- CVE-2023-51636 HIGH 7.8 UPGRADE Avira Prime Link Following Local Privilege Escalation Vulnerability
FAQ
How do I fix avira vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is avira being exploited right now?
None of the tracked avira CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which avira CVE should I patch first?
CVE-2023-51636 currently ranks highest (43/100): Avira Prime Link Following Local Privilege Escalation Vulnerability.