CVE-2026-6064— Norton, Avast, and AVG local privilege escalation via link following in Data Shredder
Quick assessment
Affected
Gen Digital Norton Antivirus
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Norton Antivirus、Avast Antivirus 和 AVG Internet Security 的 Data Shredder 组件中存在一个链接跟随漏洞，影响 Windows 平台上版本早于 26.5.10933 的上述产品。该漏洞允许本地、低权限的攻击者提升权限至 SYSTEM。在特权粉碎操作过程中，攻击者可利用任意文件/文件夹删除功能，从而获取 NT AUTHORITY\SYSTEM 权限。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1548.001 · Setuid and Setgid
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-6064
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Norton, Avast, and AVG local privilege escalation via link following in Data Shredder
Source: CVE Program / CVE List V5
Vulnerability Description
Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\SYSTEM privelages.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Gen Digital | Norton Antivirus | 0 ~ 26.5 | - |
|
| Gen Digital | Avast Antivirus | 0 ~ 26.5 | - |
|
| Gen Digital | AVG Internet Security | 0 ~ 26.5 | - |
|
II. Public POCs for CVE-2026-6064
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-6064
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: Gen Digital
-
CVE-2026-82964
Avast sandbox privilege escalation via unpreserved DACLs on -
CVE-2026-12410
CCleaner local privilege escalation via link following on un -
CVE-2026-12068
Avira Password Manager credential disclosure via cross-origi -
CVE-2026-6676
Avira antivirus engine heap buffer OOB write when scanning a -
CVE-2025-14098
Avira antivirus engine heap buffer OOB write when scanning a
Same weakness: CWE-59
-
CVE-2026-116271
MIME::Parser::FileUnder versions before 5.521 for Perl reuse -
CVE-2026-103401
Session Smart Router and Session Smart Conductor: An attacke -
CVE-2026-108306
Tanium addressed a local privilege escalation vulnerability -
CVE-2026-108332
Tanium addressed an improper link resolution before file acc -
CVE-2026-108304
Tanium addressed a local privilege escalation vulnerability