cvedb.io
CVE-2022-4291
HIGH · CVSS 7.7
EPSS exploitation probability: 0%
Published 2022-12-08T00:15:10.610 · Last modified 2026-06-17T05:20:30.127

Summary

The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue was fixed in version 18.0.1478 of the Script Shield Component.

Affected products

avast — script_shield

Does this affect you?

Add your gear to cvedb and we'll alert you only when avast ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.