Threat Intelligence Database

CVE-2026-92253 is a medium severity vulnerability in WatchDog Anti-Virus 1.8.640 through 1.8.803 on Windows. It involves improper link resolution during the quarantine restoration process, allowing a local low-privileged attacker to create a directory junction at the original file path. If an administrator restores the quarantined file, this can cause the file to be written to an arbitrary location, potentially enabling modification of protected files or SYSTEM-level code execution via DLL hijacking.

CVE-2026-92252 is a medium severity vulnerability in WatchDog Anti-Virus for Windows. The installation directory is assigned incorrect default permissions, granting the Users group Full Control over the directory. This allows local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files. Such modifications could disable antivirus protection or enable privileged code execution if the altered binaries are loaded by an elevated WatchDog process.

CVE-2026-92254 is a vulnerability in Watchdog Anti-Virus 1.8.640 through versions before 1.8.804 on Windows. It involves missing authorization checks in the IOCTL handlers of the wsdkd.sys kernel driver, allowing local low-privileged users to delete arbitrary files with SYSTEM privileges. This bypasses NTFS access controls and can disable security products or destabilize the OS.

Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side Request Forgery (SSRF). This corresponds to versions of ownCloud 10 prior to 10.15.3. Upgrade ownCloud 10 to version 10.15.3 or later or upgrade Anti-Virus for ownCloud 10 to version 1.2.3 or later to receive a fix.