CVE-2026-6676Disclosure

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.27.12.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-13: 2Patch / Workaround · 2026-06-13: 1Technical Details · 2026-06-13: 206-13
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-6676 Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Servi… https://www.cve.org/CVERecord?id=CVE-2026-6676

    Post summary

    The post announces a new HTTP heap buffer out-of-bounds write vulnerability in Avira Antivirus that can lead to local code execution or denial of service when scanning a malformed POSIX tar archive.

    00000161
    57.6K followersView on X
  • NerdieNews@NewsNerdie
    Patch

    ⚠️ CVE-2026-6676 in Avira: Attackers can exploit a heap buffer OOB write via malformed POSIX tar archives, enabling arbitrary code execution. Critical flaw—patch immediately to avoid compromise during scans. #NerdieNews #CyberSecurity #Ransomware https://t.co/de4YT4aUCi

    Post summary

    A critical heap buffer overflow in Avira's handling of POSIX tar archives (CVE‑2026‑6676) allows arbitrary code execution; users are urged to patch immediately.

    0000051
    65 followersView on X

Explore more