CVE-2026-12067 is a vulnerability in AvastSvc native message dispatcher (ashServ.dll) on Windows where missing exception handlers allow a local, unprivileged attacker to crash the service by sending specially crafted JSON messages. The flaw affects multiple RPC-based native message handlers that convert JSON fields without proper type validation or exception handling, causing unhandled exceptions to propagate and crash the service.