What’s Vulnerable › Vulnerabilities

CVE-2022-31467: DLL Hijacking Vulnerability in Quick Heal Total Security

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-23 · updated 2026-06-17
• Weakness: CWE-427

Description

A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature of the DLLs it tries to load.

Affected products

• Quickheal Total Security: before 12.1.1.27 — fixed in 12.1.1.27

How to fix

Upgrade to a fixed version: Quickheal Total Security 12.1.1.27. Check the vendor advisory for mitigations.

References

• https://softwaresec001.wordpress.com/2022/05/13/dll-hijack-vulnerability-fixed-in-quick-heal-total-security/
• https://softwaresec001.wordpress.com/2022/05/13/dll-hijack-vulnerability-fixed-in-quick-heal-total-security/

Get alerted when CVE-2022-31467 or the next vulnerability affects your stack