CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2

SAFA details the full exploitation of CVE-2025-13032, turning a double-fetch vulnerability in Avast's kernel driver into a local privilege escalation to SYSTEM on Windows 11.
108 points by safateam 27 days ago www.safateam.com 28 comments

Summary

A detailed analysis reveals how a double-fetch vulnerability in Avast’s kernel driver can be exploited for local privilege escalation to SYSTEM on Windows 11, highlighting significant security risks. Understanding this exploit is crucial for users relying on Avast for protection.

Comments (28 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open