Read the docs

AVG

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

AVG records in CISA KEV

No AVG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Anti-virus · all components

Priority LOW 33

AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly de…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02601 Published 2012-08-22 No fix listed CWE-264
Priority LOW 31

Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject a…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00618 Published 2017-03-21 No fix listed CWE-427
Priority LOW 30

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.0021 Published 2023-04-19 No fix listed CWE-367
Priority LOW 28

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00167 Published 2023-04-19 No fix listed CWE-367
Priority LOW 25

Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface.

CVSS 3.1MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00211 Published 2023-04-19 No fix listed CWE-476
Open these records in search →