---
id: "CVE-2026-6064"
kind: "vulnerability"
aliases: ["CVE-2026-6064"]
title: "Norton, Avast and AVG: Data Shredder link flaw gives SYSTEM rights"
severity: "high"
cvss: 7.3
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["avast", "avg", "endpoint", "norton", "vendor", "windows"]
not_affected_if: ["patched-version", "product-not-installed"]
published_at: "2026-10-28T11:17:26+00:00"
first_seen_at: "2026-10-28T11:32:33+00:00"
updated_at: "2026-10-28T11:33:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6064", "first_seen_at": "2026-10-28T11:32:33+00:00"}]
---

# Norton, Avast and AVG: Data Shredder link flaw gives SYSTEM rights

The Data Shredder component in Norton Antivirus, Avast Antivirus and AVG Internet Security follows symbolic links during privileged shred operations, allowing arbitrary file and folder deletion. A local low-privileged user can use this to escalate to NT AUTHORITY\SYSTEM.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of Norton, Avast or AVG Internet Security on Windows against `26.5.10933`
- unknown

## Fix

- Update Norton Antivirus, Avast Antivirus and AVG Internet Security to `26.5.10933` or later

## Timeline

- 2026-10-28T11:32:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-6064

## From the sources

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\SYSTEM privelages.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_