CVE Feed

    Dashboard / CVE / CVE-2022-31466

    CVE-2022-31466

    Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when the action of quarantining or cleaning is performed, and using the time to replace the malicious file by a symlink.

    Published:May 23, 2022
    Last Modified:Nov 21, 2024
    EPS:May 23, 2022
    EPSS Score:0.00036
    CVSS Score:7.9

    Affected Products

    Vendor
    Quickheal
    Product
    Total Security

    Exploits

    No exploit reference

    Related CVEs

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High