CVE-2023-29818

MediumCVSS 5.5

Published: 12/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

In Webroot SecureAnywhere Endpoint Protection CE 23.1 version 9.0.33.39 and earlier, the default allowlist feature is stored with non-admin privileges. A local attacker can exploit this to bypass the product's protections.

Risk Assessment

The risk is that a local non-admin user can add malicious software to the allowlist, bypassing antivirus protection and executing unauthorized actions on the system.

Recommendation

Immediately update Webroot SecureAnywhere Endpoint Protection to the latest version that fixes this vulnerability. Additionally, restrict local system access to trusted users only.

Original NVD description (English source)

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via the default allowlist feature being stored as non-admin.