Veille CVE

Mardi 11 novembre 2025

2 CVE sur 2

  1. CVE-2025-62215 7.0 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 version 22H3

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

  2. CVE-2025-13032 7.8 Élevée

    Avast (Free/Premiium/Ultimeat) Antivirus · Avsat One · AVG (Free/Inernet Security/Ultimate) Antivirus · Avast antivirus

    Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.