CVE-2023-5760 (published 2023-11-08T16:36:29.217Z)
A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg Antivirus: 23.8.


Affected products: Vendor: Avast/AVG
Product: Avast/Avg Antivirus
Versions:  23.8