Description
Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file path and persuading an administrator to restore the file. This may enable modification of protected files or SYSTEM-level code execution through DLL hijacking.
Published: 2026-09-20
Score: 5.2 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 20 Sep 2026 12:45:00 +0000

Type Values Removed Values Added
Description Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file path and persuading an administrator to restore the file. This may enable modification of protected files or SYSTEM-level code execution through DLL hijacking.
Title Arbitrary File Write via Directory Junction in WatchDog Anti-Virus Quarantine Restoration
Weaknesses CWE-59
References
Metrics cvssV4_0

{'score': 5.2, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/RE:L/U:Green'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: watchdog

Published:

Updated: 2026-09-20T12:24:47.393Z

Reserved: 2026-09-15T21:07:00.097Z

Link: CVE-2026-92253

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-20T13:17:46.243

Modified: 2026-09-20T13:17:46.243

Link: CVE-2026-92253

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-59

    Improper Link Resolution Before File Access ('Link Following')