Read the docs
TI-2024-06038 Aliases CVE-2024-6510GHSA-r4pj-228r-7758

Local privilege escalation vulnerability in AVG Internet Security

Priority LOW 35CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-427.

Summary

Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0012 1st percentileScored 2026-11-07
Fix Fixed Internet Security (AVG): 24.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AVGInternet Securityup to 24.024.1Patch availableCNA
  • Internet Security VendorAVG Affected up to 24.0 Fixed in 24.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:avg:internet_security:*:*:*:*:*:windows:*:*before 24.1VulnerableAVG
  • cpe:2.3:a:avg:internet_security:*:*:*:*:*:windows:*:* Versions before 24.1 Vulnerable ·AVG

Remediation

  • Fix · CNA Internet Security (AVG) Fixed in 24.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-6510
  2. 2026-10-03 Alias added: GHSA-r4pj-228r-7758

References

Advisory 1

  • TI-2014-07822 The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and… CVSS 2.0HIGH 7.2
  • TI-2017-03572 Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security… CVSS 3.0MEDIUM 6.7
  • TI-2015-07058 AVG Internet Security 2015 allocates memory with Read, Write, Execute (RWX) permissions… CVSS 2.0MEDIUM 6.4
  • TI-2010-04850 Race condition in AVG Internet Security 9.0.791 on Windows XP allows local users to… CVSS 2.0MEDIUM 6.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences