Pandasecurity Panda Global Protection — known CVE vulnerabilities

Every CVE whose affected-product data names Pandasecurity Panda Global Protection, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-12042 — CVSS 9.8 (critical): Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in…
• CVE-2018-6321 — CVSS 7.8 (high): Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global Protection 17.0.1 allows local users to gain…
• CVE-2018-6322 — CVSS 7.8 (high): Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a…
• CVE-2017-17683 — CVSS 7.5 (high): Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \\.\PSMEMDriver DeviceIoControl request.
• CVE-2017-17684 — CVSS 7.5 (high): Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \\.\PSMEMDriver DeviceIoControl request.
• CVE-2009-4215 — CVSS 7.2 (high): Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product…