AV engines are riddled with exploitable bugs | ICT Security-Sécurité PC et Internet | Scoop.it
A security researcher has found a great number of exploitable vulnerabilities in popular security solutions and the AV engines they use, pro...


Most (if not all...) antivirus engines run with the highest privileges: root or local system," he noted. "If one can find a bug and write an exploit for the AV engine, (s)he just won root or system privileges."

Finally, most AVs get updates via HTTP only protocols, which could lead to man-in-the-middle attacks that deliver malware instead of updates.