CVE-2018-16962

CVE-2018-16962 affects Webroot SecureAnywhere on macOS prior to 9.0.8.34. The vulnerability arises from mishandling access to the product’s driver by a process that does not have root privileges, indicating a local privilege escalation risk through kernel-level access control weakness. Affected v...

CVE-2021-40425

CVE-2021-40425 affects Webroot Secure Anywhere 21.4. The vulnerability is an out-of-bounds read in the device driver WRCore_x64 and related IOCTL handlers (IOCTL GetProcessCommand and IOCTL_B03). The issue stems from insufficient bounds validation when constructing a getProcessInfo/webroot_irp st...

CVE-2023-29820

CVE-2023-29820 affects Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and earlier. According to Red Hat entries, a local attacker can access sensitive information via the EXE installer, with the vulnerability stemming from (unstated) local-privilege context and exposure during ins...

CVE-2021-40424

CVE-2021-40424 : Webroot Secure Anywhere 21.4 is affected by an out-of-bounds read in the driver WRCore_x64 (IOCTL GetProcessCommand and GetProcessCommandLine). A crafted IOCTL input can trigger a read beyond the mapped structure, causing denial of service and a system crash (local, requires driv...

CVE-2023-29819

Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and earlier is affected by CVE-2023-29819 (and linked CVEs) where a local attacker can bypass protections via a crafted payload. The vulnerability’s impact is limited to confidentiality (HIGH) with no integrity or availability impact,...

CVE-2023-29818

CVE-2023-29818 affects Webroot SecureAnywhere Endpoint Protection CE versions 9.0.33.39 and earlier. The issue allows a local attacker to bypass protections because the default allowlist feature can be stored with non-admin privileges, per Red Hat and NVD/NVD-derived records. The root cause is th...