CVE-2020-12122 - CVE House
Back to Database
Status published High CVE-2020-12122

In Max Secure Max Spyware Detector 1.0.0.044, the driver file...

Vulnerability Description

In Max Secure Max Spyware Detector 1.0.0.044, the driver file (MaxProc64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x2200019. (This also extends to the various other products from Max Secure that include MaxProc64.sys.)

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12122

Credits & Attribution

No credits recorded in the NVD database.

References

More from maxpcsecure

View All →
CVE-2019-19382
Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on...
High 7.8
CVE-2018-6209
In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxCryptMon.sys)...
High 7.8
CVE-2018-6208
In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys)...
High 7.8
CVE-2018-6207
In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys)...
High 7.8
CVE-2018-6206
In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys)...
High 7.8

Affected Vendor

maxpcsecure

View all reports →

Affected Software

max spyware detector
Vulnerable Versions:
1.0.0.044

Timeline

Official Publish: February 5th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.