{"affected":[],"cveId":"CVE-2022-26523","cwes":["CWE-400"],"description":"The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) due to a double fetch vulnerability at aswArPot+0xbb94.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"NVD: 134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}],"modifiedAt":1794312600177,"publishedAt":1778217369033,"references":[{"source":"cve@mitre.org","tags":[],"url":"https://www.avast.com/bug-bounty"},{"source":"cve@mitre.org","tags":[],"url":"https://www.sentinelone.com/labs/vulnerabilities-in-avast-and-avg-put-millions-at-risk/"}],"remediation":[],"revision":"58363057e5f97e6260bf2f274eaa1b2a4741e52cca13c882f9a4967b77e46cf8","sources":[{"modifiedAt":1794312600177,"name":"NVD","retrievedAt":1794313087869,"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26523"}],"ssvc":{"assessedAt":1778249225970,"automatable":"no","exploitation":"none","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"partial"},"status":"published","title":"CVE-2022-26523","updatedAt":1794313087869}