CVE-2023-53973CWE-59

Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module

High · published December 22, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

⚡ Just a few crafty commands could let low-privileged users sneak files into restricted areas! This privilege escalation vulnerability lurking in Zillya Total Security means attackers might just be a symbolic link away from system-level access! Think of the quarantine module as a security checkpoint where packages are temporarily held. If a mischievous delivery person finds a way to bypass the guard and redirect a package to a hidden back door, they could smuggle in anything they want. This vulnerability allows attackers to exploit the quarantine feature to place files in unauthorized system locations. With the ability to restore quarantined files using symbolic link techniques, they could even execute malicious DLLs, potentially gaining full system access. The consequences could be absolutely devastating!

Put simply

Think of the quarantine module as a security checkpoint where packages are temporarily held. If a mischievous delivery person finds a way to bypass the guard and redirect a package to a hidden back door, they could smuggle in anything they want. Zillya Total Security version 3.0.2367.0 contains a flaw allowing low-privileged users to utilize symbolic link techniques in the quarantine area, enabling them to copy files to sensitive directories that should be off-limits.

What to do

This vulnerability allows attackers to exploit the quarantine feature to place files in unauthorized system locations. With the ability to restore quarantined files using symbolic link techniques, they could even execute malicious DLLs, potentially gaining full system access. The consequences could be absolutely devastating! To protect against this issue, update Zillya Total Security to the latest version immediately. Implement strict access controls and monitor file system changes to catch any unauthorized activity. It’s crucial to ensure that users cannot manipulate the quarantine module in unintended ways. You've got this! Follow these steps to safeguard your system and maintain that hero status! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00250 · 15.5th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2025-12-22T21:35Z
EPSS history
Timeline
  • 22 DEC 21:35Z
    Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module
    cvelistv5