Webroot records

17 published records for vendor webroot.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

17 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-7824No exploit	Type-confusion vulnerability that can cause the WRSA.exe service to crash and generate a crash dumpwebroot · secureanywhere web shield · CWE-843 Pre-auth	Critical9.8	—	0.4%	Oct 3, 2024
39Monitor	CVE-2024-7825No exploit	Type confusion that can cause the WRSA.exe service to crash and generate a crash dumpwebroot · secureanywhere web shield · CWE-843 Pre-auth	Critical9.8	—	0.3%	Oct 3, 2024
39Monitor	CVE-2024-7826No exploit	Unhandled exception vulnerability that can cause the WRSA.exe service to crash and generate a crash dumpwebroot · secureanywhere web shield · CWE-754 Pre-auth	Critical9.8	—	0.3%	Oct 3, 2024
36Monitor	CVE-2020-5754No exploit	Webroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type confusion vulnerability over its listening TCPwebroot · endpoint agents · CWE-843 Pre-auth	Critical9.1	—	1.5%	Jun 15, 2020
33Monitor	CVE-2018-4012No exploit	An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK.webroot · brightcloud · CWE-119 pre-auth RCE Memory safety	High8.1	—	2.5%	Jan 3, 2019
32Monitor	CVE-2018-4015No exploit	An exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK.webroot · brightcloud · CWE-295 Pre-auth Weak crypto	High8.1	—	0.7%	Dec 18, 2018
31Monitor	CVE-2018-16962No exploit	Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.webroot · secureanywhere · CWE-123 Local privilege escalation	High7.8	—	0.5%	Sep 12, 2018
31Monitor	CVE-2020-5755No exploit	Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against renaming.webroot · endpoint agents · CWE-732 Local privilege escalation	High7.8	—	0.5%	Jun 15, 2020
31Monitor	CVE-2023-7241No exploit	Webroot Antivirus COM-Hijacking LPEwebroot · webroot antivirus (consumer) and webroot endpoint protection (business) · CWE-269 Local privilege escalation	High7.9	—	0.1%	May 1, 2024
26Monitor	CVE-2021-40424No exploit	An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4.webroot · secureanywhere · CWE-125 Memory safety Denial of service	Medium6.5	—	0.3%	Apr 14, 2022
26Monitor	CVE-2021-40425No exploit	An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4.webroot · secureanywhere · CWE-125 Memory safety Denial of service	Medium6.5	—	0.3%	Apr 14, 2022
24Monitor	CVE-2010-5183No exploit	Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and ewebroot · internet security essentials · CWE-362 Race condition	Medium6.2	—	0.2%	Aug 25, 2012
22Monitor	CVE-2023-29819No exploit	An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections viwebroot · secureanywhere · CWE-269 Local privilege escalation	Medium5.5	—	0.1%	May 12, 2023
22Monitor	CVE-2023-29820No exploit	An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive infowebroot · secureanywhere · CWE-668	Medium5.5	—	0.1%	May 12, 2023
22Monitor	CVE-2023-29818No exploit	An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections viwebroot · secureanywhere · CWE-863 Broken access control (IDOR)	Medium5.5	—	0.1%	May 12, 2023
21Monitor	CVE-2014-5741No exploit	The Security - Complete (aka com.webroot.security.complete) application 3.6.0.6610 for Android does not verify X.509 certificates from SSL swebroot · security - complete · CWE-310	Medium5.4	—	0.2%	Sep 9, 2014
21Monitor	CVE-2014-5740No exploit	The Security - Free (aka com.webroot.security) application 3.6.0.6610 for Android does not verify X.509 certificates from SSL servers, whichwebroot · security - free · CWE-310	Medium5.4	—	0.2%	Sep 9, 2014

CVE-2024-7824
39Monitor
Type-confusion vulnerability that can cause the WRSA.exe service to crash and generate a crash dump
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
webroot · secureanywhere web shieldOct 3, 2024
CVE-2024-7825
39Monitor
Type confusion that can cause the WRSA.exe service to crash and generate a crash dump
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
webroot · secureanywhere web shieldOct 3, 2024
CVE-2024-7826
39Monitor
Unhandled exception vulnerability that can cause the WRSA.exe service to crash and generate a crash dump
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
webroot · secureanywhere web shieldOct 3, 2024
CVE-2020-5754
36Monitor
Webroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type confusion vulnerability over its listening TCP
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
webroot · endpoint agentsJun 15, 2020
CVE-2018-4012
33Monitor
An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK.
HighCVSS 8.1No exploitEPSS 2%
- pre-auth RCE
- Memory safety
webroot · brightcloudJan 3, 2019
CVE-2018-4015
32Monitor
An exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK.
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
webroot · brightcloudDec 18, 2018
CVE-2018-16962
31Monitor
Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
webroot · secureanywhereSep 12, 2018
CVE-2020-5755
31Monitor
Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against renaming.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
webroot · endpoint agentsJun 15, 2020
CVE-2023-7241
31Monitor
Webroot Antivirus COM-Hijacking LPE
HighCVSS 7.9No exploitEPSS 0%
- Local privilege escalation
webroot · webroot antivirus (consumer) and webroot endpoint protection (business)May 1, 2024
CVE-2021-40424
26Monitor
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4.
MediumCVSS 6.5No exploitEPSS 0%
- Memory safety
- Denial of service
webroot · secureanywhereApr 14, 2022
CVE-2021-40425
26Monitor
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4.
MediumCVSS 6.5No exploitEPSS 0%
- Memory safety
- Denial of service
webroot · secureanywhereApr 14, 2022
CVE-2010-5183
24Monitor
Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and e
MediumCVSS 6.2No exploitEPSS 0%
- Race condition
webroot · internet security essentialsAug 25, 2012
CVE-2023-29819
22Monitor
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections vi
MediumCVSS 5.5No exploitEPSS 0%
- Local privilege escalation
webroot · secureanywhereMay 12, 2023
CVE-2023-29820
22Monitor
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive info
MediumCVSS 5.5No exploitEPSS 0%
webroot · secureanywhereMay 12, 2023
CVE-2023-29818
22Monitor
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections vi
MediumCVSS 5.5No exploitEPSS 0%
- Broken access control (IDOR)
webroot · secureanywhereMay 12, 2023
CVE-2014-5741
21Monitor
The Security - Complete (aka com.webroot.security.complete) application 3.6.0.6610 for Android does not verify X.509 certificates from SSL s
MediumCVSS 5.4No exploitEPSS 0%
webroot · security - completeSep 9, 2014
CVE-2014-5740
21Monitor
The Security - Free (aka com.webroot.security) application 3.6.0.6610 for Android does not verify X.509 certificates from SSL servers, which
MediumCVSS 5.4No exploitEPSS 0%
webroot · security - freeSep 9, 2014