PatchTheCVEtotaldefense vulnerabilities
Recent CVEs affecting totaldefense products. 5 tracked.
totaldefense has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-10-31. Highest priority: CVE-2019-13357 (score 44/100).
- CVE-2019-18645 MEDIUM 5.5 DOWNGRADE The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attac
- CVE-2019-18644 MEDIUM 5.9 DOWNGRADE The malware scan function in Total Defense Anti-virus 11.5.2.28 is vulnerable to a TOCTOU bug; consequently, s
- CVE-2019-13357 HIGH 7.8 DOWNGRADE In Total Defense Anti-virus 9.0.0.773, resource acquisition from the untrusted search path C:\ used by caschel
- CVE-2019-13356 HIGH 7.8 DOWNGRADE In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Co
- CVE-2019-13355 HIGH 7.8 DOWNGRADE In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Co
FAQ
How do I fix totaldefense vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is totaldefense being exploited right now?
None of the tracked totaldefense CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which totaldefense CVE should I patch first?
CVE-2019-13357 currently ranks highest (44/100): In Total Defense Anti-virus 9.0.0.773, resource acquisition from the untrusted search path C:\ used by caschel.