CVE-2022-31467
HIGHQuick Heal Total Security <12.1.1.27 - Privilege Escalation
Title source: llmDescription
A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature of the DLLs it tries to load.
Scores
CVSS v3
7.9
EPSS
0.0007
EPSS Percentile
21.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H
Classification
CWE
CWE-427
Status
published
Affected Products (1)
quickheal/total_security
< 12.1.1.27
Timeline
Published
May 23, 2022
Tracked Since
Feb 18, 2026