Vulnerabilities > Pandasecurity > Panda Gold Protection

DATE CVE VULNERABILITY TITLE RISK
2019-05-23 CVE-2019-12042 Incorrect Permission Assignment for Critical Resource vulnerability in Pandasecurity products
Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event (as an encrypted JSON string) to the system service AgentSvc.exe, which leads to privilege escalation when the CmdLineExecute event is queued.
network
low complexity
pandasecurity CWE-732
critical
10.0
2014-05-23 CVE-2014-3450 Local Privilege Escalation Vulnerabilitiy in Panda Security Multiple Products
Unspecified vulnerability in Panda Gold Protection and Global Protection 2014 7.01.01 and earlier, Internet Security 2014 19.01.01 and earlier, and AV Pro 2014 13.01.01 and earlier allows local users to gain privileges via unspecified vectors.
local
low complexity
pandasecurity
7.2