Back to Database
Status published
Medium
CVE-2023-1585
Avast and AVG Antivirus for Windows were susceptible to a...
Vulnerability Description
Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-1585
Credits & Attribution
No credits recorded in the NVD database.
More from Avast
View All →CVE-2025-7007
Null pointer dereference in Avast Antivirus on macOS (16.0.0) or Linux (3.0.3)
High
7.5
CVE-2025-71326
AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation
High
8.5
CVE-2025-4134
Lack of file validation in Avast Business Antivirus for Linux allows writing untrusted update files
High
7.3
CVE-2025-3500
Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation
Critical
9
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 ...
Critical
9.9
Affected Vendor
Avast
View all reports →Affected Software
Avast Antivirus, AVG Antivirus
Vulnerable Versions:
22.5
Timeline
Official Publish:
April 19th, 2023
Last Modified:
February 5th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L