Totaldefense Anti-virus — known CVE vulnerabilities

Every CVE whose affected-product data names Totaldefense Anti-virus, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2019-13355 — CVSS 7.8 (high): In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\ used by…
• CVE-2019-13356 — CVSS 7.8 (high): In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\bd\TDUpdate2\…
• CVE-2019-13357 — CVSS 7.8 (high): In Total Defense Anti-virus 9.0.0.773, resource acquisition from the untrusted search path C:\ used by caschelp.exe allows local attackers…
• CVE-2019-18644 — CVSS 5.9 (medium): The malware scan function in Total Defense Anti-virus 11.5.2.28 is vulnerable to a TOCTOU bug; consequently, symbolic link attacks allow…
• CVE-2019-18645 — CVSS 5.5 (medium): The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowing files to be…