What is the CVSS score of EUVD-2025-200065?

EUVD-2025-200065 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Windows are affected by EUVD-2025-200065?

A NULL Pointer Dereference vulnerability in Avast Antivirus (macOS version 16.0.0 and Linux version 3.0.3) allows attackers to crash the antivirus process by submitting malformed Windows PE files,…

Is there a public PoC exploit available for EUVD-2025-200065?

Yes, a public proof-of-concept exploit is available for EUVD-2025-200065. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2025-200065?

Within 24 hours: Identify all endpoints running Avast Antivirus versions 16.0.0 (macOS) or 3.0.3 (Linux) and restrict file scanning of untrusted PE files from external sources. Within 7 days: Contact Avast support for patch availability and interim security guidance; consider deploying alternative antivirus solutions on critical systems if patches remain unavailable. Within 30 days: Apply vendor patches immediately upon release, or migrate affected systems to patched Avast versions or alternative endpoint protection solutions.

Windows EUVD-2025-200065

| CVE-2025-7007 HIGH

NULL Pointer Dereference (CWE-476)

2025-12-01 security@nortonlifelock.com

Microsoft Denial Of Service Null Pointer Dereference Apple Windows macOS

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 13:34 euvd

EUVD-2025-200065

Analysis Generated

Mar 15, 2026 - 13:34 vuln.today

PoC Detected

Dec 02, 2025 - 17:16 vuln.today

Public exploit code

CVE Published

Dec 01, 2025 - 17:15 nvd

HIGH 7.5

DescriptionCVE.org

NULL Pointer Dereference vulnerability in Avast Antivirus on MacOS, Avast Anitvirus on Linux when scanning a malformed Windows PE file causes the antivirus process to crash.This issue affects Antivirus: 16.0.0; Anitvirus: 3.0.3.

Analysis

Technical ContextAI

A NULL pointer dereference occurs when the application attempts to use a pointer that has not been initialized or has been set to NULL.

RemediationAI

Add NULL checks before pointer dereference operations. Use static analysis to identify potential NULL pointer issues. Enable compiler warnings.

More from same product – last 7 days

CVE-2026-12440 CRITICAL Act Now

9.6 Jun 17

Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to po

CVE-2026-12466 HIGH This Week

8.8 Jun 17

Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to execute

CVE-2026-12437 HIGH This Week

8.3 Jun 17

Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had comprom

CVE-2026-12449 HIGH This Week

7.8 Jun 17

Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perform OS-

CVE-2026-12461 MEDIUM This Month

6.5 Jun 17

Out of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to obtain pot

EUVD-2025-200065 vulnerability details – vuln.today

Back

Windows EUVD-2025-200065

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

More from same product – last 7 days

Share

External POC / Exploit Code