← Vulnerability feed

Vulnerability record · CVE-2018-6321 · published 12 March 2018

CVE-2018-6321: Pandasecurity panda global protection unquoted search path vulnerability

Pandasecurity · Panda Global Protection

Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact.

7.8 CVSS 3.0 High EPSS 0.33% · top 76.4% CWE-428 · Unquoted search path
7.8CVSS 3.0 base score, v2 4.6
0.33%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Unquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://seclists.org/fulldisclosure/2018/Mar/25 Mailing ListThird Party Advisory
http://seclists.org/fulldisclosure/2018/Mar/25 Mailing ListThird Party Advisory

Track CVE-2018-6321 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-12042Pandasecurity panda antivirus incorrect permission assignment vulnerabilityInsecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda pro…EPSS 3.5%7.8CVE-2018-6322Pandasecurity panda global protection vulnerabilityPanda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of \.\…EPSS 0.29%7.5CVE-2017-17683Pandasecurity panda global protection memory buffer overflow vulnerabilityPanda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \\.\PSMEMDriver DeviceIoControl request.EPSS 1.1%7.5CVE-2017-17684Pandasecurity panda global protection memory buffer overflow vulnerabilityPanda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \\.\PSMEMDriver DeviceIoControl request.EPSS 1.1%7.2CVE-2009-4215Pandasecurity panda antivirus permissions and access controls vulnerabilityPanda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions (Everyone: Full Control) for the product files, whi…EPSS 0.37%

Source: NIST National Vulnerability Database (record CVE-2018-6321), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.