CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2019-16896
https://notcve.org/view.php?id=CVE-2019-16896
27 Dec 2019 — In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality. En K7 Ultimate Security versión 16.0.0117, el módulo K7BKCExt.dll (también se conoce como el módulo de copia de seguridad) valida inapropiadamente los privilegios administrativos del usuario, permitiendo una escritura de un archivo arbitrario por medio de un ataque de... • https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/K7%20Security/Local%20Privilege%20Escalation/v16.0.0117/README.md • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 1CVE-2019-16897
https://notcve.org/view.php?id=CVE-2019-16897
28 Oct 2019 — In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, allowing arbitrary registry writes in the K7AVOptn.dll module to facilitate escalation of privileges via inter-process communication with a service process. En K7 Antivirus Premium versiones 16.0.xxx hasta 16.0.0120; K7 Total Security versiones 16.0.xxx hasta 16.0.0120; y ... • https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/K7%20Security/Local%20Privilege%20Escalation/v16.0.0120/README.md • CWE-269: Improper Privilege Management •