Avast discovers and helps patch a major vulnerability