TI-2021-17488 CVE-2021-40425 · GHSA-8p6g-qcgj-whg4
Out-of-bounds read in Webroot Secure Anywhere
Priority MEDIUM 62
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4.
Webroot
Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Webroot records in CISA KEVNo Webroot vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Secureanywhere · all components
TI-2021-17487 CVE-2021-40424 · GHSA-j39p-f25v-p5gj
Out-of-bounds read in Webroot Secure Anywhere
Priority MEDIUM 62
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4.
TI-2023-14033 CVE-2023-29820 · GHSA-vxf8-wwpw-phxg
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and…
Priority MEDIUM 58
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer.
TI-2018-12117 CVE-2018-16962 · GHSA-g76p-q66j-mc8v
Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.
Priority LOW 35
Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.
TI-2023-14032 CVE-2023-29819 · GHSA-66wf-rqpr-jpx7
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and…
Priority LOW 24
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via a crafted payload.
TI-2023-14031 CVE-2023-29818 · GHSA-jv3c-wr43-xgx8
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and…
Priority LOW 24
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via the default allowlist feature being stored as non-admin.