CVE-2022-4291

CRÍTICO 10.0CVE-2022-4291 · Published 08/12/2022 · updated 17/06/2026

En resumen

CVE-2022-4291 es una vulnerabilidad CRÍTICO (CVSS 10.0) que afecta a script shield (avast).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.45%, mayor que el 39.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
script shield avast	`≤ 18.0.1473.0`	No fix yet

Description

The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue was fixed in version 18.0.1478 of the Script Shield Component.

References

support.norton.com/sp/static/external/tools/security-advisories.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free