CVE-2018-7535

—

CVSS 3.0

7.8 high

EPSS

<1%p21

Published

Jul 13, 2018 (Jul 13, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of the product's files because of weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges or obtain maximum control over the product.

Vendors: totalav
Products: totalav
Weakness: CWE-276
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.