{"id":"CVE-2026-80301","kind":"vulnerability","aliases":["CVE-2026-80301"],"related":[],"title":"Avast sandbox on Windows lets local attackers escape and run code","description":"Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox to access COM interfaces to the Task Scheduler service, escape containment, and execute code with elevated privileges outside the sandbox.\n\n\n\nThe sandbox virtualizes file system and registry access but does not adequately restrict COM interface access to Task Scheduler. A process inside the sandbox can instantiate COM objects bound to Task Scheduler functionality and invoke methods to schedule and execute tasks on the host system. The Task Scheduler COM pathway is not blocked by the sandbox policy, allowing arbitrary code execution in the host security context.\n\n\n\nThis escape vector bypasses the sandbox's intended process and file isolation boundaries and can be chained with other host-level privilege escalation techniques.","summary":"The Avast sandbox does not block access to the Windows Task Scheduler COM interfaces, so code running inside the sandbox can schedule tasks on the host. An attacker with low privileges can use this to escape the sandbox and run code with elevated privileges outside it.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Avast Antivirus / One / Premium Security / Ultimate","fixed":["26.7"],"affected":"< 26.7 (Windows)","ecosystem":"vendor"},{"name":"AVG Antivirus Free / Internet Security / Ultimate","fixed":["26.7"],"affected":"< 26.7 (Windows)","ecosystem":"vendor"},{"name":"Norton Antivirus Plus / 360 Standard / Deluxe / Advanced","fixed":["26.7"],"affected":"< 26.7 (Windows)","ecosystem":"vendor"}],"ecosystems":[],"tags":["avast","avg","endpoint-security","norton","other","sandbox-escape","windows"],"not_affected_if":["non-windows","unknown","version-26.7-or-later"],"how_to_check":"Open the product's About/Settings page and read the version number; any Avast, AVG or Norton Windows build below 26.7 is listed as affected. Only matters if you use the Avast sandbox feature (also check whether it is enabled).","fix":"Update to version 26.7 or later of the Avast, AVG or Norton product (the record lists versions below 26.7 as affected). Update guides: https://support.avast.com/en-us/article/Update-Antivirus","status":"open","published_at":"2026-11-06T16:18:58+00:00","first_seen_at":"2026-11-06T16:42:42+00:00","triaged_at":"2026-11-06T16:44:57+00:00","updated_at":"2026-11-06T16:46:06+00:00","category":"other","confidence":0.75,"triage":{"at":"2026-11-06T16:44:57Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Avast sandbox on Windows lets local attackers escape and run code","impact":"high","summary":"The Avast sandbox does not block access to the Windows Task Scheduler COM interfaces, so code running inside the sandbox can schedule tasks on the host. An attacker with low privileges can use this to escape the sandbox and run code with elevated privileges outside it.","audience":"everyone","category":"other","nicknames":[],"who_cares":["avast","windows","endpoint-security"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"code runs with elevated privileges outside the sandbox on the host","analyst_note":"Find the affected Avast product versions and the fixed build from the NVD entry and the vendor advisory.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Avast sandbox on Windows is the affected component, and only a local attacker who can already run code inside the sandbox can use it. The sources do not say which Avast product versions are affected or whether the sandbox is enabled by default.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000658,"input_tokens":4386,"output_tokens":438,"severity_before":"unknown"},"analyst_status":"done","analyst_note":"Find the affected Avast product versions and the fixed build from the NVD entry and the vendor advisory.","search":"'-2026':13A,16A '-80301':14A,17A '360':33A 'access':54B,113C,139C,147C 'adequ':143C 'advanced':36A 'allow':101C,189C 'antivirus':19A,25A,31A 'arbitrari':190C 'attack':7A,75B,107C 'avast':1A,18A,37B,49B,97C 'avg':24A,38B 'block':53B,184C 'bound':160C 'boundari':210C 'bypass':201C 'chain':214C 'code':11A,63B,88B,125C,191C 'com':60B,114C,145C,158C,180C 'contain':122C 'context':197C 'cve':12A,15A 'deluxe':35A 'elev':90B,127C 'endpoint':40B 'endpoint-secur':39B 'escal':221C 'escap':8A,46B,83B,121C,199C 'execut':108C,124C,171C,192C 'file':135C,208C 'free':26A 'function':164C 'host':73B,175C,195C,218C 'host-level':217C 'improp':93C 'insid':65B,109C,153C 'instanti':157C 'intend':205C 'interfac':61B,115C,146C 'internet':27A 'invok':166C 'isol':94C,209C 'let':5A 'level':219C 'local':6A,103C 'low':77B,105C 'low-privileg':104C 'method':167C 'norton':30A,42B 'object':159C 'one':20A 'outsid':92B,129C 'pathway':181C 'plus':32A 'polici':188C 'premium':21A 'privileg':78B,91B,106C,128C,220C 'process':152C,206C 'registri':138C 'restrict':144C 'run':10A,64B,87B 'sandbox':2A,45B,50B,67B,85B,98C,111C,131C,133C,155C,187C,203C 'sandbox-escap':44B 'schedul':59B,69B,119C,150C,163C,169C,179C 'secur':41B,196C 'security':22A,28A 'servic':120C 'standard':34A 'system':136C,176C 'task':58B,70B,118C,149C,162C,172C,178C 'techniqu':222C 'ultimate':23A,29A 'use':80B 'vector':200C 'virtual':134C 'window':4A,47B,57B,100C","nicknames":[],"mitigations":[],"who_affected":"Windows machines running Avast (Antivirus, One, Premium Security, Ultimate), AVG (Antivirus Free, Internet Security, Ultimate) or Norton (Antivirus Plus, 360 Standard/Deluxe/Advanced) below version 26.7. The attacker must already be able to run code inside the Avast sandbox, then can use Task Scheduler COM access to run code with elevated privileges. Systems on 26.7 or later, and non-Windows systems, can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-06T16:46:06Z","by":"analyst","doc":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-80301","run_id":1911},"products":{"at":"2026-11-06T16:46:06Z","by":"analyst","doc":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-80301","run_id":1911}},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update your Avast, AVG or Norton antivirus on Windows to the latest version (26.7 or newer) using the app's built-in update.","pkeys":["antivirusfreeinternetsecurityultimate","antivirusonepremiumsecurityultimate","antivirusplus360standarddeluxeadvanced","avastantivirusonepremiumsecurityultimate","avgantivirusfreeinternetsecurityultimate","nortonantivirusplus360standarddeluxeadvanced"],"ptokens":["360","advanced","antivirus","avast","avg","deluxe","free","internet","norton","one","plus","premium","security","standard","ultimate"],"labels":["avast","avg","endpointsecurity","high","norton","other","sandboxescape","windows"],"campaign_type":null,"search_a":"'-2026':13A,16A '-80301':14A,17A '360':33A 'advanced':36A 'antivirus':19A,25A,31A 'attack':7A 'avast':1A,18A 'avg':24A 'code':11A 'cve':12A,15A 'deluxe':35A 'escap':8A 'free':26A 'internet':27A 'let':5A 'local':6A 'norton':30A 'one':20A 'plus':32A 'premium':21A 'run':10A 'sandbox':2A 'security':22A,28A 'standard':34A 'ultimate':23A,29A 'window':4A","search_b":"'access':54B 'attack':75B 'avast':37B,49B 'avg':38B 'block':53B 'code':63B,88B 'com':60B 'elev':90B 'endpoint':40B 'endpoint-secur':39B 'escap':46B,83B 'host':73B 'insid':65B 'interfac':61B 'low':77B 'norton':42B 'outsid':92B 'privileg':78B,91B 'run':64B,87B 'sandbox':45B,50B,67B,85B 'sandbox-escap':44B 'schedul':59B,69B 'secur':41B 'task':58B,70B 'use':80B 'window':47B,57B","search_c":"'access':113C,139C,147C 'adequ':143C 'allow':101C,189C 'arbitrari':190C 'attack':107C 'avast':97C 'block':184C 'bound':160C 'boundari':210C 'bypass':201C 'chain':214C 'code':125C,191C 'com':114C,145C,158C,180C 'contain':122C 'context':197C 'elev':127C 'escal':221C 'escap':121C,199C 'execut':108C,124C,171C,192C 'file':135C,208C 'function':164C 'host':175C,195C,218C 'host-level':217C 'improp':93C 'insid':109C,153C 'instanti':157C 'intend':205C 'interfac':115C,146C 'invok':166C 'isol':94C,209C 'level':219C 'local':103C 'low':105C 'low-privileg':104C 'method':167C 'object':159C 'outsid':129C 'pathway':181C 'polici':188C 'privileg':106C,128C,220C 'process':152C,206C 'registri':138C 'restrict':144C 'sandbox':98C,111C,131C,133C,155C,187C,203C 'schedul':119C,150C,163C,169C,179C 'secur':196C 'servic':120C 'system':136C,176C 'task':118C,149C,162C,172C,178C 'techniqu':222C 'vector':200C 'virtual':134C 'window':100C","first_public_at":"2026-11-06T16:18:58+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-80301","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80301","severity":null,"published_at":"2026-11-06T16:18:58+00:00","modified_at":"2026-11-06T16:18:58+00:00","first_seen_at":"2026-11-06T16:42:42+00:00","fetched_at":"2026-11-06T16:42:42+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-80301:1911","url":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-80301","severity":null,"published_at":"2026-11-06T16:46:06+00:00","modified_at":"2026-11-06T16:46:06+00:00","first_seen_at":"2026-11-06T16:46:06+00:00","fetched_at":"2026-11-06T16:46:06+00:00","note":"Gen Digital CNA record in NVD lists Avast, AVG and Norton Windows products below 26.7 as affected. Gen's advisories page does not list this CVE yet. Fixed build 26.7 is inferred from the lessThan bound. No exploitation or PoC found. The similar sandbox CVE-2026-82964 and the PrettyPrague PoC are different bugs. Whether the sandbox is on by default is unknown.","cites":["https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-80301"]}],"documents":[{"id":88000,"url":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-80301","title":"NVD record CVE-2026-80301 (CNA: Gen Digital)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}