Avast Antivirus Zero

Gbhackers •Divya • September 3, 2026

A public proof-of-concept (PoC) repository has revealed a local privilege escalation zero-day vulnerability in GenDigital’s Avast Antivirus. This vulnerability allows an attacker to dump the Windows Security Account Manager (SAM) database and launch a shell running as NT AUTHORITY\SYSTEM. The researcher behind the repository, known as MSNightmare, claims that the issue affects fully patched installations […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zero-Day Exploit Discovered in Avast Antivirus A proof-of-concept exploit named PrettyPrague has been released for a privilege escalation vulnerability in Avast Antivirus, allowing attackers to dump the Windows Security Account Manager (SAM) database and execute commands as NT AUTHORITY\SYSTEM. The exploit affects all versions of Avast Antivirus and potentially other Gen Digital products, including AVG and Norton. The researcher, known as Chaotic Eclipse or MSNightmare, published the exploit on August 30, 2026, and it quickly gained traction on GitHub, reaching 125 stars and 31 forks within 24 hours. Gen Digital has not publicly acknowledged the vulnerability or provided any patches or workarounds. Security professionals are advised to monitor for unusual activity related to the SAM registry hive and rotate local account credentials as a precaution. 5 sources 68

Extracted Entities

Avast Antivirus Zero

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

MITRE ATT&CK (2)

Platforms (1)