Quickheal Total Security — known CVE vulnerabilities

Every CVE whose affected-product data names Quickheal Total Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2017-8775 — CVSS 9.8 (critical): Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to…
• CVE-2017-5005 — CVSS 9.8 (critical): Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus…
• CVE-2017-8773 — CVSS 9.8 (critical): Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to…
• CVE-2017-8774 — CVSS 9.8 (critical): Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to…
• CVE-2022-31467 — CVSS 7.9 (high): A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve…
• CVE-2022-31466 — CVSS 7.9 (high): Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve…
• CVE-2018-8090 — CVSS 7.8 (high): Quick Heal Total Security 64 bit 17.00 (QHTS64.exe), (QHTSFT64.exe) - Version 10.0.1.38; Quick Heal Total Security 32 bit 17.00…
• CVE-2025-69875 — CVSS 7.8 (high): A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore…
• CVE-2020-9362 — CVSS 7.8 (high): The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total…
• CVE-2015-8285 — CVSS 7.5 (high): The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service.
• CVE-2017-8776 — CVSS 7.5 (high): Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately…
• CVE-2020-27587 — CVSS 6.7 (medium): Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vault via a…
• CVE-2020-27586 — CVSS 5.9 (medium): Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text.
• CVE-2020-27585 — CVSS 4.4 (medium): Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings via a brute-attack…