• •Safa Team researchers identified a vulnerability, CVE-2025-13032, allowing attackers to escape the Avast Antivirus sandbox.
• •The exploit chain relies on specific memory corruption flaws discovered during the second phase of their technical analysis.
• •It remains unconfirmed whether this exploit has been observed in live, malicious attacks outside of this controlled research environment.

Safa Team has published a technical breakdown of CVE-2025-13032, detailing how a sandbox escape can be executed against Avast Antivirus. This research follows their initial analysis of the product's internal architecture, marking a transition from identifying theoretical weaknesses to providing a functional exploit path. While such vulnerabilities often involve complex interactions between user-mode and kernel-mode processes, the report does not clarify if Avast has fully addressed the specific execution steps detailed here. Whether this vulnerability is currently being weaponized by threat actors remains the critical question for enterprise security teams.