CVE-2025-13032: Avast Antivirus Sandbox Escape Research (Part 2)

Fri, 25 Sep 2026 15:49:12 +0000

Engineer — Learn: A sandbox escape in Avast’s AV engine is interesting attack-surface research, but EPSS is near zero, no KEV listing, and enterprise cloud/infra engineers rarely depend on Avast — no patch or config action required today.
SOC/IR — Learn: The sandbox-escape technique illustrates how malware could evade AV sandboxing; worth reading for triage context, but no IOCs or active exploitation mean there is no detection work to act on now.
Leader — Skip
Signals: CVE-2025-13032 — CISA KEV: not listed, EPSS 0.00, public PoC on GitHub

Antivirus on CuraSec