Priority HIGH 65
The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Fortinet Antivirus 4.2.254.0, Ikarus Viru…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.97229 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Com…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.9815 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99992 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Co…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99854 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ika…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99908 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.9998 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 49
The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others a…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03407 · Published 2009-05-22 · No fix listed CWE-20
Priority MEDIUM 47
ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method cal…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04166 · Published 2014-07-08 · No fix listed CWE-264
Priority MEDIUM 45
AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the fil…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02902 · Published 2008-12-12 · No fix listed CWE-20
Priority MEDIUM 44
Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the fil…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.01905 · Published 2008-12-12 · No fix listed CWE-20
Priority MEDIUM 42
Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00249 · Published 2025-11-11 · Fixed in 25.3 CWE-367
Priority LOW 36
AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00342 · Published 2024-11-22 · No fix listed CWE-59
Priority LOW 36
AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00351 · Published 2024-11-22 · No fix listed CWE-59
Priority LOW 35
Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escalate privileges and execute arbitrary code in the context of…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00173 · Published 2025-05-09 · Fixed in 24.1 31.7.2024 CWE-367
Priority LOW 35
Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via crea…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00224 · Published 2025-05-09 · Fixed in 24.3.17165.10564 CWE-59
Priority LOW 35
Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00167 · Published 2025-05-09 · No fix listed CWE-367
Priority LOW 35
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0012 · Published 2024-09-12 · Fixed in 24.1 CWE-427
Priority LOW 35
An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00553 · Published 2019-10-23 · No fix listed CWE-427
Priority LOW 35
AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan inside disk image (aka DMG) files.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01306 · Published 2017-07-12 · No fix listed
Priority LOW 35
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations, and consequently ga…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01458 · Published 2015-02-06 · No fix listed CWE-264
Priority LOW 34
AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) Comm…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00992 · Published 2006-12-18 · No fix listed
Priority LOW 33
Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain eleva…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00195 · Published 2023-01-10 · Fixed in 119.1.5.1, 1.1.78 +1 CWE-269
Priority LOW 33
AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly de…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02601 · Published 2012-08-22 · No fix listed CWE-264
Priority LOW 32
Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) Command…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00331 · Published 2006-12-18 · No fix listed
Priority LOW 32
Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePa…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00331 · Published 2006-12-18 · No fix listed
Load more