Totalav records
4 published records for vendor totalav.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-266 Incorrect Privilege Assignment1
- CWE-276 Incorrect Default Permissions1
- CWE-428 Unquoted Search Path or Element1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2021-47787No exploit | TotalAV 5.15.69 - Unquoted Service Pathtotalav · totalav · CWE-428 | High8.5 | — | 0.2% | Jan 16, 2026 |
32Monitor | CVE-2019-18194Proof of concept | TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation.totalav · totalav 2020 | High7.8 | — | 2.2% | Jan 10, 2020 |
31Monitor | CVE-2024-31771Proof of concept | Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted filetotalav · totalav · CWE-266 | High7.8 | — | 0.3% | May 14, 2024 |
31Monitor | CVE-2018-7535No exploit | An issue was discovered in TotalAV v4.1.7.totalav · totalav · CWE-276 | High7.8 | — | 0.2% | Jul 13, 2018 |
- CVE-2021-4778734Monitor
TotalAV 5.15.69 - Unquoted Service Path
HighCVSS 8.5No exploitEPSS 0%totalav · totalavJan 16, 2026
- CVE-2019-1819432Monitor
TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation.
HighCVSS 7.8Proof of conceptEPSS 2%totalav · totalav 2020Jan 10, 2020
- CVE-2024-3177131Monitor
Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file
HighCVSS 7.8Proof of conceptEPSS 0%totalav · totalavMay 14, 2024
- CVE-2018-753531Monitor
An issue was discovered in TotalAV v4.1.7.
HighCVSS 7.8No exploitEPSS 0%totalav · totalavJul 13, 2018