CVE-2025-13032

D

ouble fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.

References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

08 Dec 2025, 18:10

Type Values Removed Values Added
First Time Microsoft windows
Avast antivirus
Microsoft
Avast
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
References () https://www.gendigital.com/us/en/contact-us/security-advisories/ - () https://www.gendigital.com/us/en/contact-us/security-advisories/ - Vendor Advisory

11 Nov 2025, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-11-11 17:15

Updated : 2025-12-08 18:10


NVD link : CVE-2025-13032

Mitre link : CVE-2025-13032

CVE.ORG link : CVE-2025-13032


JSON object : View

Products Affected
CWE
CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

NVD-CWE-noinfo