TotalAV Elevation of Privilege Vulnerability

TotalAV is a suite of computer security protection software that supports multiple platforms. The software includes features such as virus protection, anti-phishing and anti-spyware. An elevation of privilege vulnerability exists in TotalAV version 2020 4.14.31, which can be exploited by an...

CVE-2019-18194

TotalAV 2020 4.14.31 is affected by CVE-2019-18194, a privilege-escalation vulnerability where exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder. The vulnerability is supported by multiple sources (Red Hat advisory, CNVD, CVE records,...