https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-27750.htmlhttps://patchthecve.com/cve/CVE-2026-27750.htmlWed, 17 Jun 2026 10:27:37 +0000HIGH 7.8: Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target https://patchthecve.com/cve/CVE-2026-27749.htmlhttps://patchthecve.com/cve/CVE-2026-27749.htmlWed, 17 Jun 2026 10:27:37 +0000HIGH 7.8: Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file located in C:\\ProgramData using .NET BinaryFormatter without imhttps://patchthecve.com/cve/CVE-2026-27748.htmlhttps://patchthecve.com/cve/CVE-2026-27748.htmlWed, 17 Jun 2026 10:27:37 +0000HIGH 7.8: Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\\ProgramData without validating whether the path resolves through a symbolic link or reparse point. https://patchthecve.com/cve/CVE-2023-51636.htmlhttps://patchthecve.com/cve/CVE-2023-51636.htmlWed, 17 Jun 2026 06:41:22 +0000HIGH 7.8: Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulne