Is CVE-2016-4025 actively exploited?

No active exploitation of CVE-2016-4025 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2016-4025 be exploited remotely?

No. CVE-2016-4025 requires local access to exploit.

What is the CVSS score of CVE-2016-4025?

CVE-2016-4025 has a CVSS score of 5.5 (MEDIUM).

HOME VULNERABILITIESCVE-2016-4025

MEDIUM

CVE-2016-4025

CWE-254Published: November 3, 2016· Updated: Jun 17, 2026

5.5

CVSS v3.1

Official Description

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call.

NVD Source

Technical Analysis

CVE-2016-4025 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 5.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityHigh

AvailabilityNone

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Vendors & Products

avast11 product(s)

business securityfree antivirusinternet securitypremierpro antivirusemail server securityendpoint protectionendpoint protection plusendpoint protection suiteendpoint protection suite plusfile server security

Source: NVD CPE · 42 total CPE entries