PatchTheCVEdrweb vulnerabilities
Recent CVEs affecting drweb products. 2 tracked.
drweb has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-09-24. Highest priority: CVE-2021-28130 (score 40/100).
- CVE-2021-28130 HIGH 7.8 DOWNGRADE Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web
- CVE-2020-23967 HIGH 7.8 DOWNGRADE Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative p
FAQ
How do I fix drweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is drweb being exploited right now?
None of the tracked drweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which drweb CVE should I patch first?
CVE-2021-28130 currently ranks highest (40/100): Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web.