CVE-2026-6064

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and…

Risk score: 44/100
CVSS: 7.3 v3.1
Published: 28 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leverage…
Affected: See advisory
Fix: Upgrade the product to 26.5.10933 or later.
Exploitation: No known exploitation

Why it is Yellow

CVSS 7.3 high

References

https://www.gendigital.com/us/en/contact-us/security-advisories/

Original description

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\SYSTEM privelages.

Last activity 28 Oct 2026. Patch Forecast updates every hour.