NightmareEclipse

New Capabilities

As of September 2026: Published PrettyPrague, a separate Avast sandbox LPE

SAFA researchers published the full exploit chain for CVE-2025-13032, a double-fetch bug in Avast's aswSnx.sys kernel driver. On an up-to-date Windows 11 system, a race condition becomes a controlled pool overflow, then an arbitrary kernel read/write, and finally a stolen SYSTEM token.

Updated Sep 25