CVE-2020-15724: High severity virustotal vulnerability
In the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking to bypass the hips could execute arbitrary code on the Local system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-15724?
CVE-2020-15724 is classified as a local privilege escalation vulnerability that can lead to arbitrary code execution.
How do I fix CVE-2020-15724?
To mitigate CVE-2020-15724, users should upgrade to versions of 360 Total Security above 12.1.0.1005.
What causes CVE-2020-15724?
CVE-2020-15724 is caused by a DLL hijacking vulnerability in 360 Total Security when GameChrome.exe is called from the Gamefolder.
Who is affected by CVE-2020-15724?
CVE-2020-15724 affects users running version 12.1.0.1005 or below of 360 Total Security.
Can CVE-2020-15724 be exploited remotely?
CVE-2020-15724 requires local access, as the vulnerability must be exploited on the affected system.