PT-2026-5977 · Quick Heal · Total-Security

CVE-2025-69875

·

Published

2026-02-03

·

Updated

2026-02-11

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Quick Heal Total Security version 23.0.0
Description A flaw exists in the quarantine management component of the software where inadequate validation of restore paths and incorrect permission handling permit a low-privilege local user to restore quarantined files to protected system directories. This can be exploited by a local attacker to place files in locations requiring higher privileges, potentially resulting in privilege escalation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Files Accessible to External Parties

Improper Preservation of Permissions

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-69875

Affected Products

Total-Security