Read the docs

AVG

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

AVG records in CISA KEV

No AVG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

44 records

Priority HIGH 65

The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Fortinet Antivirus 4.2.254.0, Ikarus Viru…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.97229 Published 2012-03-21 No fix listed CWE-264
Priority HIGH 65

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.99992 Published 2012-03-21 No fix listed CWE-264
Priority HIGH 65

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Co…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.99854 Published 2012-03-21 No fix listed CWE-264
Priority HIGH 65

The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ika…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.99908 Published 2012-03-21 No fix listed CWE-264
Priority HIGH 65

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.9998 Published 2012-03-21 No fix listed CWE-264
Priority MEDIUM 49

The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03407 Published 2009-05-22 No fix listed CWE-20
Priority MEDIUM 47

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method cal…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04166 Published 2014-07-08 No fix listed CWE-264
Priority MEDIUM 45

AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the fil…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02902 Published 2008-12-12 No fix listed CWE-20
Priority MEDIUM 44

Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the fil…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01905 Published 2008-12-12 No fix listed CWE-20
Priority MEDIUM 42

Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00249 Published 2025-11-11 Fixed in 25.3 CWE-367
TI-2024-06702 CVE-2024-7237 · GHSA-7j59-4397-6j52

Link following in AVG AntiVirus Free

Priority LOW 36

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00342 Published 2024-11-22 No fix listed CWE-59
TI-2024-06699 CVE-2024-7234 · GHSA-mxvq-xmr3-fr4w

Link following in AVG AntiVirus Free

Priority LOW 36

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00351 Published 2024-11-22 No fix listed CWE-59
Priority LOW 35

Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escalate privileges and execute arbitrary code in the context of…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00173 Published 2025-05-09 Fixed in 24.1 31.7.2024 CWE-367
Priority LOW 35

Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via crea…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00224 Published 2025-05-09 Fixed in 24.3.17165.10564 CWE-59
Priority LOW 35

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00167 Published 2025-05-09 No fix listed CWE-367
Priority LOW 35

Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0012 Published 2024-09-12 Fixed in 24.1 CWE-427
Priority LOW 33

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain eleva…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00195 Published 2023-01-10 Fixed in 119.1.5.1, 1.1.78 +1 CWE-269
Priority LOW 33

AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly de…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02601 Published 2012-08-22 No fix listed CWE-264
Load more
Open these records in search →