Approved changes feed: RSS · Atom

cpe:2.3:a:totalav:totalav:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTotalav (a5c09fa8-8daa-5053-af25-19860ab9c608)
ProductTotalav (e125b0e0-cf38-5287-b44b-74e93781bfa6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31771 vulnerable 2026-06-08 06:35:32.091509 Details available
Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file
Published: 2024-05-13T18:42:47.733Z
Updated: 2025-02-13T15:47:56.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47787 vulnerable 2026-06-08 05:38:07.658802 TotalAV 5.15.69 - Unquoted Service Path
HIGH (7.8)
TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges. Attackers can place malicious executables in specific unquoted path segments to potentially gain SYSTEM-level access by exploiting the service path configuration.
Published: 2026-01-15T23:25:39.809Z
Updated: 2026-04-07T14:06:10.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7535 vulnerable 2026-06-08 05:12:03.825330 Details available
An issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of the product's files because of weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges or obtain maximum control over the product.
Published: 2018-07-13T17:00:00.000Z
Updated: 2024-08-05T06:31:04.550Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.