{"id":"CVE-2026-6064","revision":"2d405f0ca71241d68ed10e21043406ac","records":[{"revision":"2d405f0ca71241d68ed10e21043406ac","observedAt":"2026-10-28T11:27:43.363+00:00","statement":{"source":"cve-program","id":"CVE-2026-6064","aliases":[],"title":"Norton, Avast, and AVG local privilege escalation via link following in Data Shredder","description":"Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\\SYSTEM privelages.","state":0,"publishedAt":"2026-10-28T10:47:51.974+00:00","modifiedAt":"2026-10-28T10:47:51.974+00:00","affected":[{"ecosystem":"Vendor product","name":"Norton Antivirus","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Gen Digital\",\n                    \"product\": \"Norton Antivirus\",\n                    \"platforms\": [\n                        \"Windows\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"26.5\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Avast Antivirus","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Gen Digital\",\n                    \"product\": \"Avast Antivirus\",\n                    \"platforms\": [\n                        \"Windows\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"26.5\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"AVG Internet Security","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Gen Digital\",\n                    \"product\": \"AVG Internet Security\",\n                    \"platforms\": [\n                        \"Windows\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"26.5\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","score":7.3,"severity":"HIGH"}],"references":["https://www.gendigital.com/us/en/contact-us/security-advisories/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-6064","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-6064","identifiers":["CVE-2026-6064"]},"retained":false,"historicalAffected":[]}],"coverage":[]}