Uncontrolled search path in 360 Total Security
Priority LOW 35CWE-427Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-427.
Summary
In the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking to bypass the hips could execute arbitrary code on the Local system.
Why it matters now
EPSS 0.00635 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | 360 Total Security | 12.1.0.1005 | — | No fix listed | CNA |
- 360 Total Security Vendor— Affected 12.1.0.1005 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:360totalsecurity:360_total_security:*:*:*:*:*:*:*:* | up to 12.1.0.1005 | Vulnerable | 360totalsecurity |
- cpe:2.3:a:360totalsecurity:360_total_security:*:*:*:*:*:*:*:* Versions up to 12.1.0.1005 Vulnerable ·360totalsecurity
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-15724
- 2026-10-03 Alias added: GHSA-c7j7-c678-p6mm
- 2026-10-25 EPSS moved to the 50th–90th percentile
References
Advisory 1
More 360totalsecurity 360 Total Security vulnerabilities
- TI-2024-14635 An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows… CVSS 3.1HIGH 8.8
- TI-2017-09378 360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan… CVSS 3.0HIGH 7.8
- TI-2021-13245 Buffer Overflow vulnerability in Qihoo 360 Safe guard v12.1.0.1004, v12.1.0.1005… CVSS 3.1HIGH 7.8
- TI-2020-12395 Uncontrolled search path in 360 Total Security CVSS 3.1HIGH 7.8
- TI-2020-12394 Uncontrolled search path in 360 Total Security CVSS 3.1HIGH 7.8
- TI-2018-13156 360 Total Security 3.5.0.1033 allows a Sandbox Escape via an "import os" statement… CVSS 3.0MEDIUM 6.3
Sources
- CVE-2020-15724 · CVE Program
- CVE-2020-15724 · NVD
- FIRST EPSS
- GHSA-c7j7-c678-p6mm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences