Vulnerability Database

322,905

Total vulnerabilities in the database

CVE-2018-7535

An issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of the product's files because of weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges or obtain maximum control over the product.

  • Published: Jul 13, 2018
  • Updated: Nov 9, 2025
  • CVE: CVE-2018-7535
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
totalav / totalav 4.1.7 4.6.19.x