Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.

Description

Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avast (Free/Premiium/Ultimeat) Antivirus

Default version status: affected

  • 0 to < 25.3affected

Avsat One

Default version status: affected

  • 0 to < 25.3affected

AVG (Free/Inernet Security/Ultimate) Antivirus

Default version status: affected

  • 0 to < 25.3affected

References