PatchTheCVECVE-2023-32179: VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability
CVE-2023-32179 is a high-severity flaw (CVSS 7.8) affecting antivirus. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the FPQuarTransfer method. By creating a symbolic link, an attacker can ab
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 56%) |
| CISA exploited list | No |
| Weakness | CWE-59 |
| Published | 2024-05-03 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-32179?
antivirus: upgrade to 12.0.1.203. Exact commands for each OS are on this page.
Is CVE-2023-32179 being exploited?
CVE-2023-32179 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-32179 affect?
CVE-2023-32179 affects antivirus. Severity is high (CVSS 7.8). VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain t
How urgent is CVE-2023-32179?
Priority 38/100. High severity
Related CVEs
- CVE-2025-13032 CRITICAL 9.9 UPGRADE Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escala
- CVE-2025-7073 HIGH 7.8 UPGRADE UPGRADE A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows
- CVE-2024-9484 MEDIUM 5.1 UPGRADE UPGRADE An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/
- CVE-2024-9483 MEDIUM 5.1 UPGRADE UPGRADE A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 rel
- CVE-2024-9482 MEDIUM 5.1 UPGRADE UPGRADE An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024