{"affected":[],"cveId":"CVE-2022-26522","cwes":["CWE-367"],"description":"The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) due to a double fetch vulnerability at aswArPot+0xc4a3.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"NVD: 134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794312600177,"publishedAt":1778217368893,"references":[{"source":"cve@mitre.org","tags":[],"url":"https://www.avast.com/bug-bounty"},{"source":"cve@mitre.org","tags":[],"url":"https://www.sentinelone.com/labs/vulnerabilities-in-avast-and-avg-put-millions-at-risk/"}],"remediation":[],"revision":"8ae0401406fd14ca5fc80981407b0bc5f13f81442ab2b0f39e2034c9ffc6c9fa","sources":[{"modifiedAt":1794312600177,"name":"NVD","retrievedAt":1794313087573,"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26522"}],"ssvc":{"assessedAt":1778250547558,"automatable":"no","exploitation":"none","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"total"},"status":"published","title":"CVE-2022-26522","updatedAt":1794313087573}