CVE-2025-1364

Summary

CVE-2025-1364 is a critical vulnerability affecting MicroWord eScan Antivirus 7.0.32 on Linux systems. The USB Protection Service component's passPrompt function is susceptible to a stack-based buffer overflow. An attacker can exploit this vulnerability on a local host, and the exploit has already been made public. The vendor, MicroWord, was notified about the disclosure but has yet to provide a response or patch. Users are urged to take precautions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.