CVE-2022-26523
35Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendcvss 5.3epss 0.2%
from disclosure to weapon
Published on NVDMay 8
VulnCheckDec 5
exploitation probability
0.2%top 89% of all CVEs
observed exploitation
yesVulnCheck
The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) due to a double fetch vulnerability at aswArPot+0xbb94.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
n/a · n/a