CVE-2019-18194

TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation

published January 10, 2020

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02209 · 82.4th percentile
Published
2020-01-10T17:26Z
EPSS history
Timeline
  • 10 JAN 17:26Z
    TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation
    cvelistv5