Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: AVG Component: Antivirus Clear all filters
TI-2024-06701 CVE-2024-7236 · GHSA-q8f8-792j-48fx

Link following in AVG AntiVirus Free

Priority LOW 24

AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00267 Published 2024-11-22 No fix listed CWE-59
TI-2024-06699 CVE-2024-7234 · GHSA-mxvq-xmr3-fr4w

Link following in AVG AntiVirus Free

Priority LOW 36

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00351 Published 2024-11-22 No fix listed CWE-59
TI-2024-06702 CVE-2024-7237 · GHSA-7j59-4397-6j52

Link following in AVG AntiVirus Free

Priority LOW 36

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00342 Published 2024-11-22 No fix listed CWE-59
TI-2024-06700 CVE-2024-7235 · GHSA-4jrj-98h6-235v

Link following in AVG AntiVirus Free

Priority LOW 25

AVG AntiVirus Free Link Following Denial-of-Service Vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00305 Published 2024-11-22 No fix listed CWE-59
TI-2024-08802 CVE-2024-9484 · GHSA-jjm3-8267-chq9

NULL pointer dereference in Avast Antivirus

Priority LOW 24

An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application during file processing.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00134 Published 2024-10-04 Fixed in < 24092400 CWE-476
TI-2024-08801 CVE-2024-9483 · GHSA-hm4r-q33h-2fw6

Uninitialized variable in digital signiture verification may crash the application

Priority LOW 24

A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00134 Published 2024-10-04 Fixed in < 24092400 CWE-476
TI-2024-08800 CVE-2024-9482 · GHSA-3pc8-hwcr-cqrw

Out of Bounds write on scan of malformed Mach-O file may crash the application

Priority LOW 24

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application during file processing.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00134 Published 2024-10-04 Fixed in < 24092400 CWE-787
TI-2024-08799 CVE-2024-9481 · GHSA-xfxr-3v89-hch2

Out of Bounds write on scan of malformed eml file may crash the application

Priority LOW 24

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00134 Published 2024-10-04 Fixed in < 24092400 CWE-787
TI-2022-03932 CVE-2022-4294 · GHSA-69fr-p5cc-p429

Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation

Priority LOW 33

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain eleva…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00195 Published 2023-01-10 Fixed in 119.1.5.1, 1.1.78 +1 CWE-269
TI-2008-05238 CVE-2008-5522 · GHSA-gxww-rc9c-h62v

AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers…

Priority MEDIUM 45

AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the fil…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02902 Published 2008-12-12 No fix listed CWE-20