PatchTheCVECVE-2023-32177: VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability
CVE-2023-32177 is a high-severity flaw (CVSS 7.8) affecting antivirus. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DeleteHistoryFile method. The issue results from the lack of p
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.7% (top 47%) |
| CISA exploited list | No |
| Weakness | CWE-22 |
| Published | 2024-05-03 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-32177?
antivirus: upgrade to 12.0.1.203. Exact commands for each OS are on this page.
Is CVE-2023-32177 being exploited?
CVE-2023-32177 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-32177 affect?
CVE-2023-32177 affects antivirus. Severity is high (CVSS 7.8). VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first
How urgent is CVE-2023-32177?
Priority 41/100. High severity
Related CVEs
- CVE-2025-13032 CRITICAL 9.9 UPGRADE Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escala
- CVE-2025-7073 HIGH 7.8 UPGRADE UPGRADE A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows
- CVE-2024-9484 MEDIUM 5.1 UPGRADE UPGRADE An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/
- CVE-2024-9483 MEDIUM 5.1 UPGRADE UPGRADE A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 rel
- CVE-2024-9482 MEDIUM 5.1 UPGRADE UPGRADE An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024