Approved changes feed: RSS · Atom

cpe:2.3:a:avg:tuneup:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAvg (f63cef58-c2b2-513c-8aa0-dc7ba2bc5eb1)
ProductTuneup (3ef53610-6360-581e-a9fd-ca2a0413d13a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-13960 vulnerable 2026-06-03 14:54:25.781415 Link Following Local Privilege Escalation Vulnerability in AVG TuneUp Version 23.4
HIGH (7.8)
Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.
Published: 2025-05-09T15:20:29.660Z
Updated: 2025-05-09T18:54:22.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13959 vulnerable 2026-06-03 14:54:25.781141 Link Following Local Privilege Escalation Vulnerability in AVG TuneUp 24.2.16593.9844
HIGH (7.8)
Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging the service to delete a directory
Published: 2025-05-09T15:20:18.308Z
Updated: 2025-05-09T19:02:14.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13944 vulnerable 2026-06-03 14:54:25.775401 Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)
HIGH (7.8)
Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.
Published: 2025-05-09T15:18:34.124Z
Updated: 2025-10-13T09:52:21.123Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.