{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Avast/AVG/Norton 26.7: sandbox escapes and WFP stream-parser crash (CVE-2026-80301–80303) · updates",
  "home_page_url": "https://pwn.watch/i/avast-sandbox-escape-wfp-cve-2026-80301-80303",
  "feed_url": "https://pwn.watch/i/avast-sandbox-escape-wfp-cve-2026-80301-80303/feed.json",
  "description": "On Nov 6 2026 NVD published three Gen Digital (security@nortonlifelock.com) advisories affecting Avast, AVG and Norton Windows products before 26.7. CVE-2026-80301: the Avast sandbox virtualizes filesystem/registry but does not adequately restrict Task Scheduler COM, so a local low-privileged process inside the sandbox can schedule host tasks and escape to elevated host code execution. CVE-2026-80302: insufficient isolation in sandbox file virtualization lets a sandboxed process write arbitrary files to protected host locations and achieve host code execution. CVE-2026-80303: an integer underflow in the WFP stream parser can crash the system (DoS), triggerable remotely via filtered network traffic or locally. Update Avast/AVG/Norton to 26.7 or later.",
  "language": "en",
  "_pwn": {
    "slug": "avast-sandbox-escape-wfp-cve-2026-80301-80303",
    "severity": "high",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/avast-sandbox-escape-wfp-cve-2026-80301-80303/feed.xml",
    "llms": "https://pwn.watch/i/avast-sandbox-escape-wfp-cve-2026-80301-80303/llms.txt",
    "json": "https://pwn.watch/i/avast-sandbox-escape-wfp-cve-2026-80301-80303.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/avast-sandbox-escape-wfp-cve-2026-80301-80303#2026-11-06-fb0bcddd",
      "url": "https://pwn.watch/i/avast-sandbox-escape-wfp-cve-2026-80301-80303#2026-11-06-fb0bcddd",
      "title": "Avast/AVG/Norton 26.7: sandbox escapes and WFP stream-parser crash (CVE-2026-80301–80303): NVD publishes CVE-2026-80301 (Avast/AVG/Norton sandbox escape via Task Scheduler COM), CVE-2026-80302 (sandbox file-virtualization arbitrary write to host), and CVE-2026-80303 (WFP stream-parser integer underflow DoS), fixed in version 26.7+. Gen Digital is the CVE sourceIdentifier.",
      "content_text": "Avast/AVG/Norton 26.7: sandbox escapes and WFP stream-parser crash (CVE-2026-80301–80303): NVD publishes CVE-2026-80301 (Avast/AVG/Norton sandbox escape via Task Scheduler COM), CVE-2026-80302 (sandbox file-virtualization arbitrary write to host), and CVE-2026-80303 (WFP stream-parser integer underflow DoS), fixed in version 26.7+. Gen Digital is the CVE sourceIdentifier.\n\nSource: https://nvd.nist.gov/vuln/detail/CVE-2026-80301",
      "date_published": "2026-11-06T00:00:00.000Z",
      "external_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80301",
      "tags": [
        "high"
      ]
    }
  ]
}