CVE-2022-4429 MEDIUM

CVE-2022-4429: Avira Security for Windows - Denial of Service

Vendor Nortonlifelock (Gendigital)
Product Avira Security for Windows
Weakness CWE-428
Published January 10, 2023
Last update April 8, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

Avira Security for Windows contains an unquoted service path which allows attackers with local administrative privileges to cause a Denial of Service. The issue was fixed with Avira Security version 1.1.78

Key dates

02Disclosure timeline

January 10, 2023 CVE published
April 8, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-9818 Vulnerability caused by unquoted file paths of Windows services registered by the Uninterruptible Power Supply (UPS) management application CVE-2020-36936 Magic Mouse 2 utilities 2.20 - 'magicmouse2service' Unquoted Service Path CVE-2022-50901 Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path CVE-2023-7043 Unquoted path privilege vulnerability in ESET products for Windows CVE-2019-25286 _GCafé 3.0 - 'gbClienService' Unquoted Service Path