CVE-2025-13032

CVSS 3.1: 7.8 high
EPSS: <1%p16
Published: Nov 11, 2025 · Nov 11, 2025
Modified: Oct 23, 2026

Analyze CVE-2025-13032 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow.

Vendors: avast

Products: antivirus

Weakness: CWE-367

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

1 story

CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2

SafeTeam details full exploitation of CVE-2025-13032, a double-fetch bug in Avast's kernel driver, achieving kernel read/write and Windows 11 privilege escalation.

Hacker News · securitySep 25, 07:03 UTC · Sep 25, 2026Research HN 21 points · 1 commentsCVE-2025-130323