GIVE YOUR AGENT THE EVIDENCE

Set up in your agent.

One prompt to get started. Paste it into your coding agent to connect cve.new through MCP and bring vulnerability context into your workflow.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

GIVE YOUR AGENT THE EVIDENCE

Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

cve.new
Check your stack
CVE-2026-6064high7.3

Norton, Avast, and AVG local privilege escalation via link following in Data Shredder

Impact

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\SYSTEM privelages.

Source excerpt · GEN

What to do

Customers are advised to upgrade to version >26.5 released on or after May 2026

GEN guidance

Affected packages

This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.

Affected products

Vendor version evidence. Product records are separate from automatic dependency matching.

Gen Digital · Norton Antivirus

Platforms: Windows

Other versions: unaffected

Version / rangeSource status
0 to before 26.5affected
GEN version evidence

Gen Digital · Avast Antivirus

Platforms: Windows

Other versions: unaffected

Version / rangeSource status
0 to before 26.5affected
GEN version evidence

Gen Digital · AVG Internet Security

Platforms: Windows

Other versions: unaffected

Version / rangeSource status
0 to before 26.5affected
GEN version evidence

Original source description

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\SYSTEM privelages.

References