CVE-2025-13032 - Vulnerability Details - OpenCVE

Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Avast	Antivirus
Avg	Antivirus
Microsoft	Windows

No data.

No data.

References

Link	Providers
https://www.gendigital.com/us/en/contact-us/security-advisories/

History

Fri, 14 Nov 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 12 Nov 2025 13:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Avast Avast antivirus Avg Avg antivirus Microsoft Microsoft windows
Vendors & Products		Avast Avast antivirus Avg Avg antivirus Microsoft Microsoft windows

Tue, 11 Nov 2025 16:30:00 +0000

Type	Values Removed	Values Added
Description		Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow.
Weaknesses		CWE-367
References		https://www.gendigital.com/us/en/contact-us/security-advisories/
Metrics		cvssV3_1 `{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: NLOK

Published: 2025-11-11T16:16:33.666Z

Updated: 2025-11-14T19:27:08.451Z

Reserved: 2025-11-11T15:59:56.045Z

Link: CVE-2025-13032

Vulnrichment

Updated: 2025-11-14T19:27:05.463Z

NVD

Status : Awaiting Analysis

Published: 2025-11-11T17:15:39.700

Modified: 2025-11-12T16:19:34.210

Link: CVE-2025-13032

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-13032", "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "state": "PUBLISHED", "assignerShortName": "NLOK", "dateReserved": "2025-11-11T15:59:56.045Z", "datePublished": "2025-11-11T16:16:33.666Z", "dateUpdated": "2025-11-14T19:27:08.451Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "platforms": ["Windows"], "product": "(Free/Premiium/Ultimeat) Antivirus", "vendor": "Avast", "versions": [{"lessThan": "25.3", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "platforms": ["Windows"], "product": "One", "vendor": "Avsat", "versions": [{"lessThan": "25.3", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "platforms": ["Windows"], "product": "(Free/Inernet Security/Ultimate) Antivirus", "vendor": "AVG", "versions": [{"lessThan": "25.3", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "SAFA Team"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow."}], "value": "Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3\u00a0 on windows allows local attacker to escalate privelages via pool overflow."}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-367", "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "NLOK", "dateUpdated": "2025-11-11T16:16:33.666Z"}, "references": [{"url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Upgrade to a version after >= 25.3"}], "value": "Upgrade to a version after >= 25.3"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-14T19:27:01.750107Z", "id": "CVE-2025-13032", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-14T19:27:08.451Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-13032", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-11-14T19:27:01.750107Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-14T19:27:05.463Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "value": "SAFA Team"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Avast", "product": "(Free/Premiium/Ultimeat) Antivirus", "versions": [{"status": "affected", "version": "0", "lessThan": "25.3", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "affected"}, {"vendor": "Avsat", "product": "One", "versions": [{"status": "affected", "version": "0", "lessThan": "25.3", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "affected"}, {"vendor": "AVG", "product": "(Free/Inernet Security/Ultimate) Antivirus", "versions": [{"status": "affected", "version": "0", "lessThan": "25.3", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "Upgrade to a version after >= 25.3", "supportingMedia": [{"type": "text/html", "value": "Upgrade to a version after >= 25.3", "base64": false}]}], "references": [{"url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3\u00a0 on windows allows local attacker to escalate privelages via pool overflow.", "supportingMedia": [{"type": "text/html", "value": "Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-367", "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition"}]}], "providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "NLOK", "dateUpdated": "2025-11-11T16:16:33.666Z"}}}, "cveMetadata": {"cveId": "CVE-2025-13032", "state": "PUBLISHED", "dateUpdated": "2025-11-14T19:27:08.451Z", "dateReserved": "2025-11-11T15:59:56.045Z", "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "datePublished": "2025-11-11T16:16:33.666Z", "assignerShortName": "NLOK"}, "dataVersion": "5.2"}