VYPR
← All advisories
High severity7.9NVD Advisory· Published May 23, 2022· Updated Jun 17, 2026

CVE-2022-31467

CVE-2022-31467

Description

A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature of the DLLs it tries to load.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Quickheal/Total Security2 versions
    cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:quickheal:total_security:*:*:*:*:*:*:*:*range: <12.1.1.27
    • (no CPE)range: <12.1.1.27
  • Quick Heal/Total Securitydescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.