← Database

CVE-2022-26523

MEDIUM CVSS: 5.3 Published: 2026-05-08 Modified: 2026-06-17

Description

The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) due to a double fetch vulnerability at aswArPot+0xbb94.

Affected Platforms

Unknown

Weakness Type

CWE-400

References