CVE-2020-12463

HIGH 7.8CVE-2020-12463 · Published 05/05/2020 · updated 17/06/2026

In short

CVE-2020-12463 is a HIGH (CVSS 7.8) vulnerability affecting software updater (avira).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.0% of all vulnerabilities.
Fix: update to 2.0.6.27476 or later.

Package	Affected versions	Patched versions
software updater avira	`< 2.0.6.27476`	`2.0.6.27476`

Description

An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.

References

support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater · Release Notes

More vulnerabilities in software updater

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free