CVE-2019-18893

MEDIUM 6.1CVE-2019-18893 · Published 13/01/2020 · updated 17/06/2026

In short

CVE-2019-18893 is a MEDIUM (CVSS 6.1) vulnerability affecting secure browser (avast), secure browser (avg), video downloader (video downloader project).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.1% of all vulnerabilities.
Fix: update to 1.5 or later.

Package	Affected versions	Patched versions
secure browser avast	`= 77.1.1831.91`	No fix yet
secure browser avg	`= 77.0.1790.77`	No fix yet
video downloader video_downloader_project	`< 1.5`	`1.5`

Description

XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.77 allows websites to execute their code in the context of this component. While Video Downloader is technically a browser extension, it is granted a very wide set of privileges and can for example access cookies and browsing history, spy on the user while they are surfing the web, and alter their surfing experience in almost arbitrary ways.

References

palant.de/2020/01/13/pwning-avast-secure-browser-for-fun-and-profit · Exploit

More vulnerabilities in secure browser

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free