---
id: "CVE-2026-80301"
page: "https://infrastack.ai/live/CVE-2026-80301"
kind: "vulnerability"
aliases: ["CVE-2026-80301"]
title: "Avast sandbox on Windows lets local attackers escape and run code"
severity: "high"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "Avast Antivirus / One / Premium Security / Ultimate", "fixed": ["26.7"], "affected": "< 26.7 (Windows)", "ecosystem": "vendor"}, {"name": "AVG Antivirus Free / Internet Security / Ultimate", "fixed": ["26.7"], "affected": "< 26.7 (Windows)", "ecosystem": "vendor"}, {"name": "Norton Antivirus Plus / 360 Standard / Deluxe / Advanced", "fixed": ["26.7"], "affected": "< 26.7 (Windows)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["avast", "avg", "endpoint-security", "norton", "other", "sandbox-escape", "windows"]
not_affected_if: ["non-windows", "unknown", "version-26.7-or-later"]
published_at: "2026-11-06T16:18:58+00:00"
first_seen_at: "2026-11-06T16:42:42+00:00"
updated_at: "2026-11-06T16:46:06+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80301", "first_seen_at": "2026-11-06T16:42:42+00:00"}, {"source": "analyst", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-80301", "first_seen_at": "2026-11-06T16:46:06+00:00", "cites": ["https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-80301"]}]
exploit_sources: []
---

# Avast sandbox on Windows lets local attackers escape and run code

Link for people: https://infrastack.ai/live/CVE-2026-80301 (this .md is for agents)

The Avast sandbox does not block access to the Windows Task Scheduler COM interfaces, so code running inside the sandbox can schedule tasks on the host. An attacker with low privileges can use this to escape the sandbox and run code with elevated privileges outside it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Avast Antivirus / One / Premium Security / Ultimate affected < 26.7 (Windows) fixed 26.7
- vendor:AVG Antivirus Free / Internet Security / Ultimate affected < 26.7 (Windows) fixed 26.7
- vendor:Norton Antivirus Plus / 360 Standard / Deluxe / Advanced affected < 26.7 (Windows) fixed 26.7

## How to check

Open the product's About/Settings page and read the version number; any Avast, AVG or Norton Windows build below 26.7 is listed as affected. Only matters if you use the Avast sandbox feature (also check whether it is enabled).

## Fix

Update to version 26.7 or later of the Avast, AVG or Norton product (the record lists versions below 26.7 as affected). Update guides: https://support.avast.com/en-us/article/Update-Antivirus

## Timeline

- 2026-11-06T16:42:42+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-80301
- 2026-11-06T16:46:06+00:00 analyst https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-80301 — Gen Digital CNA record in NVD lists Avast, AVG and Norton Windows products below 26.7 as affected. Gen's advisories page does not list this CVE yet. Fixed build 26.7 is inferred from the lessThan bound. No exploitation or PoC found. The similar sandbox CVE-2026-82964 and the PrettyPrague PoC are different bugs. Whether the sandbox is on by default is unknown.

## Documents

- [advisory] NVD record CVE-2026-80301 (CNA: Gen Digital) https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-80301

## From the sources

Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox to access COM interfaces to the Task Scheduler service, escape containment, and execute code with elevated privileges outside the sandbox.



The sandbox virtualizes file system and registry access but does not adequately restrict COM interface access to Task Scheduler. A process inside the sandbox can instantiate COM objects bound to Task Scheduler functionality and invoke methods to schedule and execute tasks on the host system. The Task Scheduler COM pathway is not blocked by the sandbox policy, allowing arbitrary code execution in the host security context.



This escape vector bypasses the sandbox's intended process and file isolation boundaries and can be chained with other host-level privilege escalation techniques.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_