{"id":"CVE-2026-12067","published":"2026-11-06T16:17:55.640","lastModified":"2026-11-10T19:21:14.417","description":"Missing exception handlers in AvastSvc native message dispatcher (ashServ.dll) on Windows allow a local, unprivileged attacker to crash the service by sending specially crafted JSON messages.\n\n\n\nThe vulnerability spans multiple handler pathways in the RPC-based native message protocol:\n\n  *  Log_NmSvc.message handler: converts JSON fields to strings without type validation and without exception boundaries. \n  *  OpenInSz_NmSvc handler: converts URL and origin fields to strings without type checking, exposing an exception.\n  *  OpenInSz_NmSvc.profile handler: converts the profile field to an integer without validation.\n\n\nIn all three cases, the exceptions are not caught by action-specific handlers and propagate up the dispatcher. The common root cause is the absence of try-catch blocks around JSON type conversions in the native message processing chain.","cvssScore":6.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-248","CWE-391"],"vendors":[],"products":[],"references":[{"url":"https://support.avast.com/en-us/article/Update-Antivirus","tags":[]},{"url":"https://support.avg.com/SupportArticleView?l=en&urlname=Update-AVG-Antivirus","tags":[]},{"url":"https://support.norton.com/sp/en/us/home/current/solutions/v20240108175512167","tags":[]},{"url":"https://www.gendigital.com/us/en/contact-us/security-advisories/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}