Read the docs

AVG

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

AVG records in CISA KEV

No AVG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Antivirus · all components

Priority MEDIUM 45

AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the fil…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02902 Published 2008-12-12 No fix listed CWE-20
TI-2024-06702 CVE-2024-7237 · GHSA-7j59-4397-6j52

Link following in AVG AntiVirus Free

Priority LOW 36

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00342 Published 2024-11-22 No fix listed CWE-59
TI-2024-06699 CVE-2024-7234 · GHSA-mxvq-xmr3-fr4w

Link following in AVG AntiVirus Free

Priority LOW 36

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00351 Published 2024-11-22 No fix listed CWE-59
Priority LOW 33

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain eleva…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00195 Published 2023-01-10 Fixed in 119.1.5.1, 1.1.78 +1 CWE-269
TI-2024-06700 CVE-2024-7235 · GHSA-4jrj-98h6-235v

Link following in AVG AntiVirus Free

Priority LOW 25

AVG AntiVirus Free Link Following Denial-of-Service Vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00305 Published 2024-11-22 No fix listed CWE-59
Priority LOW 24

An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application during file processing.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00134 Published 2024-10-04 Fixed in < 24092400 CWE-476
Priority LOW 24

A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00134 Published 2024-10-04 Fixed in < 24092400 CWE-476
Priority LOW 24

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application during file processing.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00134 Published 2024-10-04 Fixed in < 24092400 CWE-787
Priority LOW 24

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00134 Published 2024-10-04 Fixed in < 24092400 CWE-787
TI-2024-06701 CVE-2024-7236 · GHSA-q8f8-792j-48fx

Link following in AVG AntiVirus Free

Priority LOW 24

AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00267 Published 2024-11-22 No fix listed CWE-59
Open these records in search →