Vulnerability Report

CVE-2025-69875

Title: Local privilege escalation in Quick Heal Total Security

Auth Bypass

Proof Of Concept

No public PoC currently indexed for CVE-2025-69875.

CWE Category NVD-CWE-noinfo

Published Date Feb 03, 2026

Modified Date Feb 11, 2026

Exploit Status Not Found

Score 7.8 CVSS v

Exploit Probability (EPSS)

0.10%

Vulnerability Summary

CVE-2025-69875: A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privileged local user to restore quarantined files into protected system directories. This behavior can be abused by a local attacker to place files in high-privilege locations, potentially leading to privilege escalation.

Impacted Vendors

Reference Links

https://github.com/mertdas/QuickHealTotalSecurityPOC https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-59439/

CVSS v3.1

Source Entity 134c704f-9b21-4f2e-91b3-4a467353bcc0

Severity HIGH

7.8

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns