In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking could execute arbitrary code on the Local system.
References
Link | Resource |
---|---|
https://security.360.cn/News/news/id/232 | Vendor Advisory |
Configurations
Information
Published : 2020-07-21 11:15
Updated : 2021-07-21 04:39
NVD link : CVE-2020-15722
Mitre link : CVE-2020-15722
JSON object : View
CWE
CWE-427
Uncontrolled Search Path Element
Products Affected
360totalsecurity
- 360_total_security