CVE-2025-69875Disclosure(quickheal / total_security)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privileged local user to restore quarantined files into protected system directories. This behavior can be abused by a local attacker to place files in high-privilege locations, potentially leading to privilege escalation.

quickheal CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/mertdas/QuickHealTotalSecurityPOC

Other references

https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-59439/

Weakness type (CWE)

CWE-269CWE-281CWE-552

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

total_security

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

quickheal

Products

total_security

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2025-69875

Full discourse1 post

CVE@CVEnew246d
Disclosure
CVE-2025-69875 A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permissi… https://www.cve.org/CVERecord?id=CVE-2025-69875
Post summary
The snippet reports a vulnerability (CVE‑2025‑69875) in Quick Heal Total Security 23.0.0, detailing insufficient validation of restore paths and improper permissions in its quarantine management component.
01000270
56.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	quickheal	total_security	23.0.0	-	-

Explore more

Back to dashboard quickheal CVEs total_security vulnerabilities