CVE-2019-18895

HIGH 7.8CVE-2019-18895 · Published 14/11/2019 · updated 17/06/2026

In short

CVE-2019-18895 is a HIGH (CVSS 7.8) vulnerability affecting scanguard antivirus (scanguard).
Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
scanguard antivirus scanguard	`≤ 2019-11-12`	No fix yet

Description

Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file.

References

hyp3rlinx.altervista.org · Exploit
seclists.org/fulldisclosure/2019/Nov/5 · Third Party Advisory
packetstormsecurity.com/files/155319/ScanGuard-Antivirus-Insecure-Permissions.html · Exploit
support.scanguard.com/en/kb/22/upgrades-available · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free