What is GHSA-qqxm-j467-m9mr?

GHSA-qqxm-j467-m9mr is a security advisory published by GitHub Security Advisories with High severity. AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service...

Which CVE IDs does GHSA-qqxm-j467-m9mr cover?

GHSA-qqxm-j467-m9mr covers the following CVE IDs: CVE-2025-71326. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qqxm-j467-m9mr?

GHSA-qqxm-j467-m9mr has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-qqxm-j467-m9mrHighCVSS 7.8

AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service...

Vendor

GitHub Security Advisories

Published

June 19, 2026

Last Modified

June 19, 2026

🔗 CVE IDs covered (1)

CVE-2025-71326 →

📋 Description

AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that execute with high-level system permissions.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2025-71326
https://www.avast.com
https://www.exploit-db.com/exploits/52510
https://www.vulncheck.com/advisories/avast-antivirus-unquoted-service-path-privilege-escalation
https://github.com/advisories/GHSA-qqxm-j467-m9mr