Priority MEDIUM 42
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects Secure…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00423 · Published 2024-10-03 · Fixed in 2.1.2.3 CWE-843
Priority MEDIUM 42
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects Secure…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00365 · Published 2024-10-03 · Fixed in 2.1.2.3 CWE-843
Priority MEDIUM 42
Improper Check for Unusual or Exceptional Conditions vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrURL.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00365 · Published 2024-10-03 · Fixed in 2.1.2.3 CWE-754
Priority LOW 34
Privilege Escalation in WRSA.EXE in Webroot Antivirus 8.0.1X- 9.0.35.12 on Windows64 bit and 32 bit allows malicious software to abuse WRSA.EXE to delete arbitrary and protected files.
CVSS 3.1HIGH 7.9· Local · Low privileges · User interaction · EPSS 0.00186 · Published 2024-05-01 · Fixed in 9.0.35.17 CWE-269
Priority MEDIUM 58
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00174 · Published 2023-05-12 · No fix listed CWE-552
Priority LOW 24
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via a crafted payload.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0018 · Published 2023-05-12 · No fix listed CWE-863
Priority LOW 24
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via the default allowlist feature being stored as non-admin.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00172 · Published 2023-05-12 · No fix listed CWE-863
Priority MEDIUM 62
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00332 · Published 2022-04-14 · No fix listed CWE-125
Priority MEDIUM 62
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00332 · Published 2022-04-14 · No fix listed CWE-125
Priority LOW 35
Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against renaming.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00501 · Published 2020-06-15 · No fix listed CWE-732
Priority MEDIUM 42
Webroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type confusion vulnerability over its listening TCP port, resulting in crashing or reading memory contents of the Webroot endpoint…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01547 · Published 2020-06-15 · No fix listed CWE-843
Priority MEDIUM 44
An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK.
CVSS 3.0CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.02546 · Published 2019-01-03 · No fix listed CWE-119
Priority LOW 37
An exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00732 · Published 2018-12-18 · No fix listed CWE-295
Priority LOW 35
Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00516 · Published 2018-09-12 · No fix listed CWE-123
Priority LOW 24
The Security - Complete (aka com.webroot.security.complete) application 3.6.0.6610 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sen…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00297 · Published 2014-09-09 · No fix listed CWE-310
Priority LOW 24
The Security - Free (aka com.webroot.security) application 3.6.0.6610 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive inform…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00297 · Published 2014-09-09 · No fix listed CWE-310
Priority LOW 27
Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not block…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00291 · Published 2012-08-25 · No fix listed CWE-362