CVE-2022-26523

The aswArPot.sys driver in the Avast and AVG Windows Anti Rootkit driver (versions before 22.1) contains a double fetch vulnerability at aswArPot+0xbb94. This flaw in the socket connection handler allows local attackers to execute arbitrary code in kernel mode or cause a denial of service through...

CVE-2025-13032: Time-of-check Time-of-use (TOCTOU) Race Condition

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2023-5760 Time-of-check to time-of-use (TOCTOU) bug leads to full local privilege escalation.

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

CVE-2023-5760 Time-of-check to time-of-use (TOCTOU) bug leads to full local privilege escalation.

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

CVE-2023-5760: Time-of-check Time-of-use (TOCTOU) Race Condition

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...