Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2023-53973

Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module

Description

Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privileged users to copy files to unauthorized system locations using the quarantine module. Attackers can leverage symbolic link techniques to restore quarantined files to restricted directories, potentially enabling system-level access through techniques like DLL hijacking.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zillya Zillya Total Security

Default version status: unaffected

  • 3.0.2367.0affected

References