Safa Team

**Name of the Vulnerable Software and Affected Versions** Avast/AVG Antivirus versions prior to 25.3 **Description** A double fetch race condition exists in the Avast/AVG kernel sandbox driver on Windows. This condition allows a local attacker to escalate privileges through a pool overflow. The issue involves a break-in and escape from the antivirus sandbox, potentially leading to a SYSTEM token heist. **Recommendations** Update Avast/AVG Antivirus to version 25.3 or later.