AVG
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AntiVirus Free | 4 | – | Nov 22, 2024 |
| AVG Antivirus | 3 | – | Apr 19, 2023 |
| TuneUp | 3 | – | May 9, 2025 |
| (Free/Inernet Security/Ultimate) Antivirus | 1 | – | Nov 11, 2025 |
| Internet Security | 1 | – | Sep 12, 2024 |
Exploited and recent CVEs
- CVE-2025-13032 Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow. 0.2%
- CVE-2024-13960 Link Following Local Privilege Escalation Vulnerability in AVG TuneUp Version 23.4 0.2%
- CVE-2024-13959 Link Following Local Privilege Escalation Vulnerability in AVG TuneUp 24.2.16593.9844 0.2%
- CVE-2024-13944 Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp) 0.2%
- CVE-2024-7236 AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability 0.3%
- CVE-2024-7234 AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability 0.4%
- CVE-2024-7237 AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability 0.3%
- CVE-2024-7235 AVG AntiVirus Free Link Following Denial-of-Service Vulnerability 0.3%
- CVE-2024-6510 Local privilege escalation vulnerability in AVG Internet Security 0.1%
- CVE-2023-1587 Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.11 0.2%
- CVE-2023-1586 Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast an 0.2%
- CVE-2023-1585 Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed 0.2%