Is CVE-2026-6064 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-6064 being exploited in the wild.

How severe is CVE-2026-6064?

High severity, with a CVSS score of 7.3, published 28 October 2026.

Which products and versions are affected?

Avast Antivirus before 26.5.10933; AVG Internet Security before 26.5.10933; Symantec Norton Antivirus before 26.5.10933.

Is there a fix for CVE-2026-6064?

Yes: fixed in Norton Antivirus 26.5.10933, Avast Antivirus 26.5.10933, AVG Internet Security 26.5.10933. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-6064 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-2026-6064?

Check whether you run Avast Antivirus, AVG Internet Security or Symantec Norton Antivirus at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-6064: Norton Antivirus symlink following privilege escalation in Data Shredder

CVE-2026-6064 · Severity: high · CVSS 7.3 · Published 2026-10-28

Norton Antivirus, Avast Antivirus, and AVG Internet Security include a Data Shredder component for secure file deletion that is vulnerable to privilege escalation on Windows. A local attacker with low privileges can exploit symlink following during the shred operation to delete arbitrary files and gain SYSTEM-level access, effectively taking complete control of the system.

Technologies: Avast Antivirus. Vendors: Avast, Symantec.

Quick answers

Is CVE-2026-6064 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-6064 being exploited in the wild.
How severe is CVE-2026-6064?: High severity, with a CVSS score of 7.3, published 28 October 2026.
Which products and versions are affected?: Avast Antivirus before 26.5.10933; AVG Internet Security before 26.5.10933; Symantec Norton Antivirus before 26.5.10933.
Is there a fix for CVE-2026-6064?: Yes: fixed in Norton Antivirus 26.5.10933, Avast Antivirus 26.5.10933, AVG Internet Security 26.5.10933. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-6064 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-2026-6064?: Check whether you run Avast Antivirus, AVG Internet Security or Symantec Norton Antivirus at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Norton Antivirus 26.5.10933, Avast Antivirus 26.5.10933, AVG Internet Security 26.5.10933

Technical details

A symlink following vulnerability in the Data Shredder component allows a local, low-privileged attacker to escalate to NT AUTHORITY\SYSTEM during privileged shred operations. The vulnerability permits arbitrary file and folder deletion through crafted symlinks, enabling privilege escalation. The attack vector is local with low privilege requirements; no network access or user interaction is needed.

Affected products

Symantec Norton Antivirus before 26.5.10933
Avast Avast Antivirus before 26.5.10933
AVG AVG Internet Security before 26.5.10933

Timeline

2026-10-28: disclosed

References

https://www.gendigital.com/us/en/contact-us/security-advisories/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.