Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privileged users to copy files to unauthorized system locations using the quarantine module. Attackers can leverage symbolic link techniques to restore quarantined files to restricted directories, potentially enabling system-level access through techniques like DLL hijacking.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 8.5 · zillyaNVD modified 2026-10-28 19:10
Affected (CPE criteria) 1
cpe:2.3:a:zillya:total_security:3.0.2367.0:*:*:*:*:*:*:*
References 4
- https://www.exploit-db.com/exploits/51151 Exploit, Third Party Advisory
- https://www.vulncheck.com/advisories/zillya-total-security-local-privilege-escalation-via-quarantine-module Third Party Advisory
- https://zillya.com/ Product
- https://www.exploit-db.com/exploits/51151 Exploit, Third Party Advisory