PT-2024-19156 · Qihoo 360 · 360 Total Security Antivirus

Mansk1Es · Published 2024-04-15 · Updated 2025-06-30 · CVE-2024-22014

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 360 Total Security Antivirus versions 11.0.0.1061 and earlier

Description An issue in 360 Total Security Antivirus allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete. This enables attackers to potentially delete arbitrary files, leading to privilege escalation.

Recommendations For versions 11.0.0.1061 and earlier, update to a version later than 11.0.0.1061 to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-61

Related Identifiers

CVE-2024-22014

Affected Products

360 Total Security Antivirus

References · 9

• 🔥 https://github.com/mansk1es/CVE_360TS · Exploit
• https://osv.dev/vulnerability/CVE-2024-22014 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22014 · Security Note
• https://t.me/cvenotify/114754 · Telegram Post
• https://twitter.com/CVEnew/status/1779937548581666898 · Twitter Post
• https://t.me/cvenotify/91819 · Telegram Post
• https://t.me/cvenotify/127107 · Telegram Post
• https://t.me/cvenotify/76834 · Telegram Post
• https://t.me/cvenotify/76856 · Telegram Post