CVE-2025-1367

Summary

CVE-2025-1367 is a newly discovered critical vulnerability that impacts MicroWord eScan Antivirus 7.0.32 on Linux systems. The issue lies in the function sprintf of the USB Password Handler component, where a buffer overflow can be triggered through manipulation. An attacker must have local access to exploit this vulnerability. Despite early disclosure, the vendor has not responded to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.