TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges. Attackers can place malicious executables in specific unquoted path segments to potentially gain SYSTEM-level access by exploiting the service path configuration.
| Software | From | Fixed in |
|---|---|---|
| totalav / totalav | 5.15.69 | 5.15.69.x |