PatchTheCVEtotalav vulnerabilities and fixes
Recent CVEs affecting totalav, with upgrade or downgrade steps. 2 tracked.
totalav has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-01-16. Highest priority: CVE-2024-31771 (score 39/100).
- CVE-2021-47787 HIGH 7.8 DOWNGRADE TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with Local
- CVE-2024-31771 HIGH 7.8 DOWNGRADE Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a cr
FAQ
How do I fix totalav vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is totalav being exploited right now?
None of the tracked totalav CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which totalav CVE should I patch first?
CVE-2024-31771 currently ranks highest (39/100): Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a cr.