AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-31466

HIGH · CVSS 7.9 EPSS 0.15% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-05-23 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.9. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2022-31466
Severity
HIGH
CVSS
7.9
EPSS
0.15%

Original NVD Description

Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when the action of quarantining or cleaning is performed, and using the time to replace the malicious file by a symlink.

Related CVEs

Other vulnerabilities affecting the same vendor(s)