CVE-2024-7243

CVE-2024-7243 affects Panda Security Dome via the PSANHost executable. The flaw allows a local attacker who can run low-privileged code to craft a junction and abuse the service to create arbitrary files, enabling privilege escalation to SYSTEM and arbitrary code execution. This is a local privil...

CVE-2024-7241

The CVE-2024-7241 entry describes a local privilege escalation in Panda Security Dome caused by the PSANHost service. According to the sources, an attacker who can run low-privileged code can abuse a junction in PSANHost to create an arbitrary file, enabling code execution with SYSTEM privileges....

CVE-2019-12042

The CVE-2019-12042 issue affects Panda Security products (Panda Antivirus, Panda Antivirus Pro, Panda Dome, Panda Global Protection, Panda Gold Protection, Panda Internet Security). Root cause: insecure permissions on the shared memory section object Global\PandaDevicesAgentSharedMemory and the e...

CVE-2024-7244

CVE-2024-7244 affects Panda Security Dome VPN. The vulnerability is a DLL hijacking flaw in the VPN process caused by not restricting DLL search to trusted paths, enabling a local attacker who can execute low-privilege code to load a malicious DLL and escalate to SYSTEM. Root cause: untrusted DLL...

CVE-2024-7245

CVE-2024-7245 affects Panda Security Dome VPN. The flaw is in the Hydra Sdk Windows Service, due to improper permissions on a folder created by the service. An attacker who can run low-privileged code locally can escalate to SYSTEM and execute arbitrary code. Public details indicate local vector ...

CVE-2024-7242

CVE-2024-7242 is a local privilege escalation impacting Panda Security Dome. The flaw exists in the PSANHost executable: an attacker who can run low-privileged code can create a junction to abuse the service, enabling deletion of arbitrary files and escalation to SYSTEM, potentially enabling arbi...