How many CVEs does AVG have?

AVG has 51 published CVE records since 2006, including 10 in the last two years.

How many AVG CVEs are in CISA KEV?

None of AVG's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which AVG products have the most CVEs?

The AVG products with the most published CVEs are anti-virus, antivirus, avg_anti-virus, protection, antivirus plus firewall.

What are the most common weakness types in AVG CVEs?

AVG's CVEs most often map to these CWE weakness types: CWE-264, CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-20 (Improper Input Validation).

Are there public exploits for AVG vulnerabilities?

Yes — 12 of AVG's CVEs have a known public exploit.

How many critical AVG vulnerabilities are there?

AVG has 5 critical and 21 high-severity CVEs.

What is the average severity of AVG CVEs?

The average CVSS base score across AVG's scored CVEs is 6.7.

RadicalNotion.AI

Log in Create an account

51 CVEs

AVG Vulnerabilities

Name: AVG vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for AVG.

51

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

12

Public exploits

PoC or exploit code

6.7

Avg CVSS

2006–2026

Overview

AVG has 51 published CVE records since 2006, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 12 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

Security scorecard

A quick read on AVG's vulnerability posture, as a share of its 51 published CVEs.

Average CVSS: 6.7
Critical / high: 51%
Actively exploited (KEV): 0%
Public exploit available: 24%
Patch available: 37%

Severity and exploitation

How the CVSS severity of AVG's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High21

Medium24

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of AVG's CVEs are currently listed in CISA's KEV catalog.

Public exploits

12

12 of AVG's CVEs have a known public exploit available.

Most affected products

The AVG products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in AVG CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish AVG CVE records.

Disclosure activity by year

How many AVG CVEs were published each year.

2015

2

2017

2

2019

2

2020

1

2023

4

2024

10

2025

7

2026

3

Latest AVG CVEs

The most recently disclosed vulnerabilities affecting AVG.

VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal
CWE-22
High · CVSS 7.1
EPSS 0.6%2026-04-29
VideoFlow Digital Video Protection DVP 2.10 - Authenticated Remote Code Execution
CWE-352
Medium · CVSS 5.3
EPSS 0.2%2026-04-29
Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass
CWE-290
Medium · CVSS 6.9
EPSS 0.6%2026-01-30
VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal
CWE-22
High · CVSS 7.1
EPSS 0.6%2025-12-24
VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution
CWE-78
High · CVSS 8.7
EPSS 0.4%2025-12-24
Genexus Protection Server 9.7.2.10 Unquoted Service Path Privilege Escalation
CWE-428
High · CVSS 8.7
EPSS 0.4%2025-12-11
Critical vulnerability · 2025-11-11
CWE-367
Critical · CVSS 9.9
EPSS 0.2%2025-11-11
High vulnerability · 2025-05-09
CWE-59
High · CVSS 7.8
EPSS 0.2%2025-05-09
High vulnerability · 2025-05-09
CWE-59
High · CVSS 7.8
EPSS 0.2%2025-05-09
Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)
CWE-367
High · CVSS 7.8
EPSS 0.2%2025-05-09
Medium vulnerability · 2024-11-22
CWE-59
Medium · CVSS 5.5
EPSS 0.3%2024-11-22
AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability
CWE-59
High · CVSS 7.8
EPSS 0.4%2024-11-22

Get an alert for each new AVG CVE, with AI-written analysis and remediation steps.

Monitor AVG CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about AVG vulnerabilities.

How many CVEs does AVG have?: AVG has 51 published CVE records since 2006, including 10 in the last two years.
How many AVG CVEs are in CISA KEV?: None of AVG's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which AVG products have the most CVEs?: The AVG products with the most published CVEs are anti-virus, antivirus, avg_anti-virus, protection, antivirus plus firewall.
What are the most common weakness types in AVG CVEs?: AVG's CVEs most often map to these CWE weakness types: CWE-264, CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-20 (Improper Input Validation).
Are there public exploits for AVG vulnerabilities?: Yes — 12 of AVG's CVEs have a known public exploit.
How many critical AVG vulnerabilities are there?: AVG has 5 critical and 21 high-severity CVEs.
What is the average severity of AVG CVEs?: The average CVSS base score across AVG's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track AVG vulnerabilities

Get an alert for each new AVG CVE, with AI-written analysis and remediation steps.

Create an account See pricing