Live › vulnerability › CVE-2026-6064
Go to dashboardThe Data Shredder component in Norton Antivirus, Avast Antivirus and AVG Internet Security follows symbolic links during privileged shred operations, allowing arbitrary file and folder deletion. A local low-privileged user can use this to escalate to NT AUTHORITY\SYSTEM.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 11:32 UTC. All times on this page are UTC.
Windows machines running Norton Antivirus, Avast Antivirus or AVG Internet Security builds earlier than . Any local user with low privileges can trigger the flaw, so shared workstations and servers with untrusted local accounts are the most exposed. Systems without these products installed are not affected.
26.5.10933No product ranges from the sources yet.
26.5.1093326.5.10933 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\SYSTEM privelages.
This page as .md · .json · in your agent: get_signal("CVE-2026-6064")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.