How many CVEs does AVG have?

AVG has 45 published CVE records since 2006, including 4 in the last two years.

How many AVG CVEs are in CISA KEV?

None of AVG's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which AVG products have the most CVEs?

The AVG products with the most published CVEs are antivirus, anti-virus, avg_anti-virus, antivirus plus firewall, Internet Security.

What are the most common weakness types in AVG CVEs?

AVG's CVEs most often map to these CWE weakness types: CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-476 (NULL Pointer Dereference), CWE-787 (Out-of-bounds Write).

Are there public exploits for AVG vulnerabilities?

Yes — 2 of AVG's CVEs have a known public exploit.

How many critical AVG vulnerabilities are there?

AVG has 5 critical and 17 high-severity CVEs.

What is the average severity of AVG CVEs?

The average CVSS base score across AVG's scored CVEs is 6.6.

RadicalNotion.AI

Log in Start free

45 CVEs

AVG Vulnerabilities

Name: AVG vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for AVG.

45

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

6.6

Avg CVSS

2006–2025

Overview

AVG has 45 published CVE records since 2006, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting AVG products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on AVG's vulnerability posture, as a share of its 45 published CVEs.

Average CVSS: 6.6
Critical / high: 49%
Actively exploited (KEV): 0%
Public exploit available: 4%
Patch available: 42%

Severity and exploitation

How the CVSS severity of AVG's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High17

Medium22

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of AVG's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of AVG's CVEs have a known public exploit available.

Most affected products

The AVG products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in AVG CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish AVG CVE records.

Disclosure activity by year

How many AVG CVEs were published each year.

2014

1

2015

2

2017

2

2019

2

2020

1

2023

4

2024

10

2025

4

Latest AVG CVEs

The most recently disclosed vulnerabilities affecting AVG.

Critical vulnerability · 2025-11-11
CWE-367
Critical · CVSS 9.9
EPSS 0.2%2025-11-11
High vulnerability · 2025-05-09
CWE-59
High · CVSS 7.8
EPSS 0.2%2025-05-09
High vulnerability · 2025-05-09
CWE-59
High · CVSS 7.8
EPSS 0.2%2025-05-09
Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)
CWE-367
High · CVSS 7.8
EPSS 0.2%2025-05-09
Medium vulnerability · 2024-11-22
CWE-59
Medium · CVSS 5.5
EPSS 0.3%2024-11-22
AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability
CWE-59
High · CVSS 7.8
EPSS 0.4%2024-11-22
High vulnerability · 2024-11-22
CWE-59
High · CVSS 7.8
EPSS 0.3%2024-11-22
Medium vulnerability · 2024-11-22
CWE-59
Medium · CVSS 5.5
EPSS 0.3%2024-11-22
Medium vulnerability · 2024-10-04
CWE-476
Medium · CVSS 5.5
EPSS 0.1%2024-10-04
Medium vulnerability · 2024-10-04
CWE-476
Medium · CVSS 5.5
EPSS 0.1%2024-10-04
Out of Bounds write on scan of malformed Mach-O file may crash the application
CWE-787
Medium · CVSS 5.5
EPSS 0.1%2024-10-04
Medium vulnerability · 2024-10-04
CWE-787
Medium · CVSS 5.5
EPSS 0.1%2024-10-04

Track new AVG CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor AVG CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,673 CVEs linux22,774 CVEs Google16,481 CVEs Apple15,095 CVEs Oracle12,708 CVEs Debian10,226 CVEs IBM8,839 CVEs Red Hat8,111 CVEs

Browse all vendors

Frequently asked questions

Common questions about AVG vulnerabilities.

How many CVEs does AVG have?: AVG has 45 published CVE records since 2006, including 4 in the last two years.
How many AVG CVEs are in CISA KEV?: None of AVG's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which AVG products have the most CVEs?: The AVG products with the most published CVEs are antivirus, anti-virus, avg_anti-virus, antivirus plus firewall, Internet Security.
What are the most common weakness types in AVG CVEs?: AVG's CVEs most often map to these CWE weakness types: CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition), CWE-476 (NULL Pointer Dereference), CWE-787 (Out-of-bounds Write).
Are there public exploits for AVG vulnerabilities?: Yes — 2 of AVG's CVEs have a known public exploit.
How many critical AVG vulnerabilities are there?: AVG has 5 critical and 17 high-severity CVEs.
What is the average severity of AVG CVEs?: The average CVSS base score across AVG's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track AVG vulnerabilities

Monitor new AVG vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing