AVG records

41 published records for vendor avg.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 14.6%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

41 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
47Plan	CVE-2012-1456No exploit	The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.avg · avg anti-virus · CWE-264 Pre-auth	Medium4.3	—	99.9%	Mar 21, 2012
47Plan	CVE-2012-1459No exploit	The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8ahnlab · v3 internet security · CWE-264 Pre-auth	Medium4.3	—	99.8%	Mar 21, 2012
47Plan	CVE-2012-1443No exploit	The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010cat · quick heal · CWE-264 Pre-auth	Medium4.3	—	99.6%	Mar 21, 2012
46Plan	CVE-2012-1457No exploit	The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.anti-virus · vba32 · CWE-264 Pre-auth	Medium4.3	—	98.3%	Mar 21, 2012
46Plan	CVE-2012-1462No exploit	The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoftahnlab · v3 internet security · CWE-264 Pre-auth	Medium4.3	—	97.8%	Mar 21, 2012
45Plan	CVE-2012-1461No exploit	The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Antanti-virus · vba32 · CWE-264 Pre-auth	Medium4.3	—	91.7%	Mar 21, 2012
41Plan	CVE-2009-1784No exploit	The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerkavg · avg anti-virus · CWE-20 Pre-auth	Critical10.0	—	3.4%	May 22, 2009
38Monitor	CVE-2014-2956No exploit	ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguardavg · safeguard · CWE-264 Pre-auth	Critical9.3	—	4.1%	Jul 8, 2014
38Monitor	CVE-2008-5522No exploit	AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document avg · antivirus · CWE-20 Pre-auth	Critical9.3	—	2.9%	Dec 12, 2008
38Monitor	CVE-2008-5530No exploit	Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document ewido · ewido security suite · CWE-20 Pre-auth	Critical9.3	—	1.9%	Dec 12, 2008
31Monitor	CVE-2019-17093No exploit	An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8.avast · antivirus · CWE-427	High7.8	—	0.5%	Oct 23, 2019
31Monitor	CVE-2024-7234No exploit	AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerabilityavg · antivirus · CWE-59 RCE Local privilege escalation	High7.8	—	0.3%	Nov 22, 2024
31Monitor	CVE-2024-7237No exploit	AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerabilityavg · antivirus · CWE-59 RCE Local privilege escalation	High7.8	—	0.3%	Nov 22, 2024
31Monitor	CVE-2022-4294No exploit	Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalationavira · avira security · CWE-269 Local privilege escalation	High7.8	—	0.1%	Jan 10, 2023
31Monitor	CVE-2024-6510No exploit	Local privilege escalation vulnerability in AVG Internet Securityavg · internet security · CWE-427 Local privilege escalation	High7.8	—	0.1%	Sep 12, 2024
30Monitor	CVE-2017-9977No exploit	AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan avg · anti-virus Pre-auth	High7.5	—	1.3%	Jul 12, 2017
30Monitor	CVE-2024-5803No exploit	Local privelage escalation via COM hijackingavg/avast · antivirus · CWE-367 Local privilege escalation Race condition	High7.5	—	0.1%	Oct 3, 2024
28Monitor	CVE-2014-9632Proof of concept	The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.531avg · protection · CWE-264 Local privilege escalation	High7.2	—	1.4%	Feb 6, 2015
28Monitor	CVE-2006-6619Proof of concept	AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypassavg · antivirus plus firewall	High7.2	—	0.9%	Dec 18, 2006
28Monitor	CVE-2006-6618No exploit	AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the prodavg · antivirus plus firewall	High7.2	—	0.3%	Dec 18, 2006
28Monitor	CVE-2006-6620No exploit	Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass thcomodo · comodo personal firewall	High7.2	—	0.3%	Dec 18, 2006
28Monitor	CVE-2006-6621No exploit	Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypafilseclab · personal firewall	High7.2	—	0.3%	Dec 18, 2006
28Monitor	CVE-2006-6622No exploit	Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify a process, which allows localsoft4ever · look n stop	High7.2	—	0.3%	Dec 18, 2006
28Monitor	CVE-2006-6623No exploit	Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass thavg · antivirus plus firewall	High7.2	—	0.3%	Dec 18, 2006
26Monitor	CVE-2010-3498No exploit	AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easieravg · anti-virus · CWE-264 pre-auth RCE	Medium6.4	—	2.6%	Aug 22, 2012

CVE-2012-1456
47Plan
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.
MediumCVSS 4.3No exploitEPSS 99%
- Pre-auth
avg · avg anti-virusMar 21, 2012
CVE-2012-1459
47Plan
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8
MediumCVSS 4.3No exploitEPSS 99%
- Pre-auth
ahnlab · v3 internet securityMar 21, 2012
CVE-2012-1443
47Plan
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010
MediumCVSS 4.3No exploitEPSS 99%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1457
46Plan
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.
MediumCVSS 4.3No exploitEPSS 98%
- Pre-auth
anti-virus · vba32Mar 21, 2012
CVE-2012-1462
46Plan
The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft
MediumCVSS 4.3No exploitEPSS 97%
- Pre-auth
ahnlab · v3 internet securityMar 21, 2012
CVE-2012-1461
45Plan
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Ant
MediumCVSS 4.3No exploitEPSS 91%
- Pre-auth
anti-virus · vba32Mar 21, 2012
CVE-2009-1784
41Plan
The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk
CriticalCVSS 10.0No exploitEPSS 3%
- Pre-auth
avg · avg anti-virusMay 22, 2009
CVE-2014-2956
38Monitor
ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard
CriticalCVSS 9.3No exploitEPSS 4%
- Pre-auth
avg · safeguardJul 8, 2014
CVE-2008-5522
38Monitor
AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document
CriticalCVSS 9.3No exploitEPSS 2%
- Pre-auth
avg · antivirusDec 12, 2008
CVE-2008-5530
38Monitor
Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document
CriticalCVSS 9.3No exploitEPSS 1%
- Pre-auth
ewido · ewido security suiteDec 12, 2008
CVE-2019-17093
31Monitor
An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8.
HighCVSS 7.8No exploitEPSS 0%
avast · antivirusOct 23, 2019
CVE-2024-7234
31Monitor
AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
avg · antivirusNov 22, 2024
CVE-2024-7237
31Monitor
AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
avg · antivirusNov 22, 2024
CVE-2022-4294
31Monitor
Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
avira · avira securityJan 10, 2023
CVE-2024-6510
31Monitor
Local privilege escalation vulnerability in AVG Internet Security
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
avg · internet securitySep 12, 2024
CVE-2017-9977
30Monitor
AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
avg · anti-virusJul 12, 2017
CVE-2024-5803
30Monitor
Local privelage escalation via COM hijacking
HighCVSS 7.5No exploitEPSS 0%
- Local privilege escalation
- Race condition
avg/avast · antivirusOct 3, 2024
CVE-2014-9632
28Monitor
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.531
HighCVSS 7.2Proof of conceptEPSS 1%
- Local privilege escalation
avg · protectionFeb 6, 2015
CVE-2006-6619
28Monitor
AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass
HighCVSS 7.2Proof of conceptEPSS 0%
avg · antivirus plus firewallDec 18, 2006
CVE-2006-6618
28Monitor
AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the prod
HighCVSS 7.2No exploitEPSS 0%
avg · antivirus plus firewallDec 18, 2006
CVE-2006-6620
28Monitor
Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass th
HighCVSS 7.2No exploitEPSS 0%
comodo · comodo personal firewallDec 18, 2006
CVE-2006-6621
28Monitor
Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypa
HighCVSS 7.2No exploitEPSS 0%
filseclab · personal firewallDec 18, 2006
CVE-2006-6622
28Monitor
Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify a process, which allows local
HighCVSS 7.2No exploitEPSS 0%
soft4ever · look n stopDec 18, 2006
CVE-2006-6623
28Monitor
Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass th
HighCVSS 7.2No exploitEPSS 0%
avg · antivirus plus firewallDec 18, 2006
CVE-2010-3498
26Monitor
AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier
MediumCVSS 6.4No exploitEPSS 2%
- pre-auth RCE
avg · anti-virusAug 22, 2012