CVE-2023-53973 Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module
Low-privileged users can escalate privileges to system level by exploiting symbolic links in the quarantine module to restore files to restricted directories.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-53973?
CVE-2023-53973 is a high-severity vulnerability in Zillya Total Security, published on 22 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privileged users to copy files to unauthorized system locations using the quarantine module. Attackers can leverage symbolic link techniques to restore quarantined files to restricted directories, potentially enabling system-level access through techniques like DLL hijacking.
Weakness: CWE-59
Which versions are affected by CVE-2023-53973?
It affects 1 product.
Products include Zillya Total Security.
How do I fix CVE-2023-53973?
No fix has been published for CVE-2023-53973 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-53973 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-53973 exists.
Sources
Also known as GHSA-w64x-6gx5-c298.