Exploiting CVE-2025-13032 in Avast Antivirus Kernel Driver for Privilege Escalation

This article details the exploitation of CVE-2025-13032, a double-fetch vulnerability in Avast's kernel driver, enabling arbitrary kernel read/write access and privilege escalation to SYSTEM. It describes techniques like heap spraying, kernel address leaks, and mitigations introduced in Windows kernel user-mode accessors.

Comments

Read original article