Read the docs
TI-2023-12713 Aliases CVE-2023-28140GHSA-p9j6-7r4q-r5hg

Executable Hijacking

Priority LOW 32CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
High
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-427.

Summary

An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may load a malicious copy of a Dependency Link Library (DLL) via a local attack vector instead of the DLL that the application was expecting, when processes are running with escalated privileges. This vulnerability is bounded only to the time of uninstallation and can only be exploited locally. At the time of this disclosure, versions before 4.0 are classified as End of Life.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00219 12th percentileScored 2026-11-07
Fix Fixed Cloud Agent (Qualys): 4.5.3.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QualysCloud Agent3.1.3.34 to before 4.5.3.14.5.3.1Patch availableCNA
  • Cloud Agent VendorQualys Affected 3.1.3.34 to before 4.5.3.1 Fixed in 4.5.3.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:windows:*:*3.1.3.34 to before 4.5.3.1VulnerableQualys
  • cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:windows:*:* Versions 3.1.3.34 to before 4.5.3.1 Vulnerable ·Qualys

Remediation

  • Fix · CNA Cloud Agent (Qualys) Fixed in 4.5.3.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Qualys Cloud Agent 4.5.3.1

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2023-12715 Race condition in Qualys Cloud AgentPriority LOW 32
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-28140
  2. 2026-10-03 Alias added: GHSA-p9j6-7r4q-r5hg

References

Advisory 1

  • TI-2023-12716 Local privilege escalation in Qualys Cloud Agent CVSS 3.1HIGH 7.0
  • TI-2023-12715 Race condition in Qualys Cloud Agent CVSS 3.1HIGH 7.0
  • TI-2023-12714 NTFS Junction CVSS 3.1MEDIUM 6.7
  • TI-2022-12004 An issue was discovered in Qualys Cloud Agent 4.8.0-49. CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences