This vulnerability arises from incorrect default permissions set by the WatchDog Anti-Virus installer on Windows systems. Specifically, the Users group is granted Full Control over the installation directory at C:\Program Files (x86)\Watchdog Anti-Virus. This permission misconfiguration allows local users with limited privileges to alter antivirus binaries and configuration files. If these modified binaries are executed by a higher-privileged WatchDog process, it may lead to disabling antivirus protection or executing code with elevated privileges. The affected versions are from 1.8.640 up to but not including 1.8.804. The CVSS 4.0 base score is 5.9, reflecting medium severity with local attack vector and low complexity.

Local, low-privileged users can modify or delete antivirus binaries and configuration files due to excessive permissions on the installation directory. This can result in disabling antivirus protection or enabling privileged code execution if the modified binaries are loaded by an elevated process. There are no known exploits in the wild at this time.

No official patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restricting permissions on the installation directory to prevent unauthorized modifications is recommended.