360totalsecurity records

7 published records for vendor 360totalsecurity.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-22014No exploit	An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbol360totalsecurity · 360 total security · CWE-61 Pre-auth	High8.8	—	0.8%	Apr 15, 2024
32Monitor	CVE-2017-12653Proof of concept	360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH,360totalsecurity · 360 total security · CWE-427 Local privilege escalation	High7.8	—	2.0%	Aug 7, 2017
31Monitor	CVE-2020-15724No exploit	In the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome.exe, there exists a local privilege escalati360totalsecurity · 360 total security · CWE-427 RCE Local privilege escalation	High7.8	—	0.6%	Jul 21, 2020
31Monitor	CVE-2020-15723No exploit	In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome.exe, there exists a360totalsecurity · 360 total security · CWE-427 RCE Local privilege escalation	High7.8	—	0.5%	Jul 21, 2020
31Monitor	CVE-2020-15722No exploit	In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privilege escalation vulnera360totalsecurity · 360 total security · CWE-427 RCE Local privilege escalation	High7.8	—	0.4%	Jul 21, 2020
31Monitor	CVE-2021-33973No exploit	Buffer Overflow vulnerability in Qihoo 360 Safe guard v12.1.0.1004, v12.1.0.1005, v13.1.0.1001 allows attacker to escalate priveleges.360totalsecurity · 360 total security · CWE-120 Local privilege escalation Memory safety	High7.8	—	0.4%	Apr 19, 2023
25Monitor	CVE-2018-18603No exploit	360 Total Security 3.5.0.1033 allows a Sandbox Escape via an "import os" statement, followed by os.system("CMD") or os.system("PowerShell"),360totalsecurity · 360 total security	Medium6.3	—	0.9%	Oct 23, 2018

CVE-2024-22014
35Monitor
An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbol
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
360totalsecurity · 360 total securityApr 15, 2024
CVE-2017-12653
32Monitor
360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH,
HighCVSS 7.8Proof of conceptEPSS 2%
- Local privilege escalation
360totalsecurity · 360 total securityAug 7, 2017
CVE-2020-15724
31Monitor
In the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome.exe, there exists a local privilege escalati
HighCVSS 7.8No exploitEPSS 1%
- RCE
- Local privilege escalation
360totalsecurity · 360 total securityJul 21, 2020
CVE-2020-15723
31Monitor
In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome.exe, there exists a
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
360totalsecurity · 360 total securityJul 21, 2020
CVE-2020-15722
31Monitor
In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privilege escalation vulnera
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
360totalsecurity · 360 total securityJul 21, 2020
CVE-2021-33973
31Monitor
Buffer Overflow vulnerability in Qihoo 360 Safe guard v12.1.0.1004, v12.1.0.1005, v13.1.0.1001 allows attacker to escalate priveleges.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
360totalsecurity · 360 total securityApr 19, 2023
CVE-2018-18603
25Monitor
360 Total Security 3.5.0.1033 allows a Sandbox Escape via an "import os" statement, followed by os.system("CMD") or os.system("PowerShell"),
MediumCVSS 6.3No exploitEPSS 1%
360totalsecurity · 360 total securityOct 23, 2018