{"schema":"threatline.record/2","record":{"id":"CVE-2026-6064","aliases":[],"summary":"Norton, Avast, and AVG local privilege escalation via link following in Data Shredder","details":"Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\\SYSTEM privelages.","categories":["Unclassified"],"product":"Norton Antivirus","vendor":"Gen Digital","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-6064","source_modified_at":"2026-10-28T10:47:51.974Z","fetched_at":"2026-10-28T15:55:58.673066Z","product":"Norton Antivirus","vendor":"Gen Digital","versions":[{"status":"affected","version":"0","lessThan":"26.5","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-6064","source_modified_at":"2026-10-28T10:47:51.974Z","fetched_at":"2026-10-28T15:55:58.673066Z","product":"Avast Antivirus","vendor":"Gen Digital","versions":[{"status":"affected","version":"0","lessThan":"26.5","versionType":"custom"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-6064","source_modified_at":"2026-10-28T10:47:51.974Z","fetched_at":"2026-10-28T15:55:58.673066Z","product":"AVG Internet Security","vendor":"Gen Digital","versions":[{"status":"affected","version":"0","lessThan":"26.5","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-6064","source_modified_at":"2026-10-28T10:47:51.974Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"name":"Norton Antivirus","ecosystem":null},"version":"26.5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-6064","source_modified_at":"2026-10-28T10:47:51.974Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"name":"Avast Antivirus","ecosystem":null},"version":"26.5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-6064","source_modified_at":"2026-10-28T10:47:51.974Z","fetched_at":"2026-10-28T15:55:58.673066Z","package":{"name":"AVG Internet Security","ecosystem":null},"version":"26.5","basis":"first unaffected version stated in the CVE record"}],"cvss":7.3,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T10:47:51.974Z","modified_at":"2026-10-28T10:47:51.974Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-6064","fetched_at":"2026-10-28T15:55:58.673066Z","source_modified_at":"2026-10-28T10:47:51.974Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://www.gendigital.com/us/en/contact-us/security-advisories/"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-28T10:47:51.974Z","content_hash":"c1439c8deb3ce2d04a4b6eeba0648c55efc0ee81be75237b8f56ff26594ed7a7"}}