CVE-2022-31467 - CVE House
Back to Database
Status published High CVE-2022-31467

DLL Hijacking Vulnerability in Quick Heal Total Security

Vulnerability Description

A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature of the DLLs it tries to load.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-31467

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Sandeep Kumar Singh

References

More from quickheal

View All →
CVE-2022-31466
TOCTOU Vulnerability in Quick Heal Total Security
High 7.9
CVE-2020-9362
The Quick Heal AV parsing engine (November 2019) allows virus-detection...
High 7.8
CVE-2020-27587
Quick Heal Total Security before 19.0 allows attackers with local...
Medium 6.7
CVE-2020-27586
Quick Heal Total Security before version 19.0 transmits quarantine and...
Medium 5.9
CVE-2020-27585
Quick Heal Total Security before 19.0 allows attackers with local...
Medium 4.4

Affected Vendor

Affected Software

total security
Vulnerable Versions:
0

Timeline

Official Publish: May 23rd, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.