{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-21T03:40:46.504","vulnerabilities":[{"cve":{"id":"CVE-2020-15722","sourceIdentifier":"security@360.cn","published":"2020-07-21T18:15:20.007","lastModified":"2026-06-17T02:57:07.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking could execute arbitrary code on the Local system."},{"lang":"es","value":"En 360 ??Total Security versión 12.1.0.1004 y por debajo, cuando TPI llama al proceso del navegador, se presenta una vulnerabilidad de escalada de privilegios local. Un atacante que podría explotar el secuestro de DLL podría ejecutar código arbitrario en el sistema local"}],"affected":[{"source":"security@360.cn","affectedData":[{"vendor":"n/a","product":"360 Total Security","versions":[{"version":"12.1.0.1004","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:360totalsecurity:360_total_security:*:*:*:*:*:*:*:*","versionEndIncluding":"12.1.0.1004","matchCriteriaId":"D275F40A-818B-4D1A-955A-7A9CBB49CDA0"}]}]}],"references":[{"url":"https://security.360.cn/News/news/id/232","source":"security@360.cn","tags":["Vendor Advisory"]},{"url":"https://security.360.cn/News/news/id/232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}