CVE-2025-1366

Summary

CVE-2025-1366 is a critical buffer overflow vulnerability affecting MicroWord eScan Antivirus 7.0.32 on Linux. The issue lies within the function strcpy of the VirusPopUp component, resulting in stack-based buffer overflow. This vulnerability can be exploited locally, meaning an attacker needs direct access to the system to launch an attack. Unfortunately, an exploit for this vulnerability has been made public, increasing the risk for potential exploitation. Despite early contact from security researchers, the vendor has not responded to address the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.