← CVE Intelligence

CVE-2026-92253

Arbitrary File Write via Directory Junction in WatchDog Anti-Virus Quarantine Restoration PUBLISHED

Description (CNA)

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file path and persuading an administrator to restore the file. This may enable modification of protected files or SYSTEM-level code execution through DLL hijacking.

Affected (CNA)

Vendor / productVersions
WatchDog / Anti-Virusaffected 1.8.640 before 1.8.804

CWE

CWE-59

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.