Vulnerability · Published Feb 3, 2026 · Assigned by mitre
CVE-2025-69875
High 7.8
In plain English
A high-severity privilege mismanagement in the affected software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Official description
A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privileged local user to restore quarantined files into protected system directories. This behavior can be abused by a local attacker to place files in high-privilege locations, potentially leading to privilege escalation.
Affected products (as reported)
Weakness: CWE-281, CWE-269, CWE-552 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H