bitdefender Vulnerability Advisory Catalog

Total 98 security vulnerabilities recorded for bitdefender software and firmware.

← Back to All Vendors
CVE-2022-0357 MEDIUM
Component: antivirus_plus

Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bi...

📅 2023-05-24
CVSS 6.7 Dossier →
Component: engines

An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete ...

📅 2022-11-01
CVSS 8.6 Dossier →
Component: gravityzone

Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsa...

📅 2022-09-05
CVSS 8.8 Dossier →
Component: endpoint_security_tools

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role...

📅 2022-04-07
CVSS 7.5 Dossier →
Component: antivirus_plus

Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security...

📅 2022-03-07
CVSS 7.8 Dossier →
CVE-2021-4198 MEDIUM
Component: antivirus_plus

A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, ...

📅 2022-03-07
CVSS 6.1 Dossier →
Component: antivirus_plus

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a s...

📅 2022-02-18
CVSS 8.2 Dossier →
Component: gravityzone

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone ...

📅 2021-12-16
CVSS 7.1 Dossier →
CVE-2021-3959 MEDIUM
Component: gravityzone

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to prox...

📅 2021-12-16
CVSS 6.8 Dossier →
CVE-2021-3554 CRITICAL
Component: endpoint_security_tools

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows ...

📅 2021-11-24
CVSS 9.0 Dossier →
CVE-2021-3553 MEDIUM
Component: endpoint_security_tools

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoi...

📅 2021-11-24
CVSS 5.3 Dossier →
CVE-2021-3552 MEDIUM
Component: endpoint_security_tools

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to prox...

📅 2021-11-24
CVSS 5.3 Dossier →
CVE-2021-3641 MEDIUM
Component: gravityzone

Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows ...

📅 2021-11-09
CVSS 6.1 Dossier →
Component: gravityzone

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone ...

📅 2021-10-28
CVSS 7.1 Dossier →
Component: endpoint_security_tools

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security To...

📅 2021-10-28
CVSS 7.8 Dossier →
Component: endpoint_security_tools

Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT A...

📅 2021-10-28
CVSS 7.8 Dossier →
Component: antivirus_plus

Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to poten...

📅 2021-06-22
CVSS 6.5 Dossier →
CVE-2021-3485 MEDIUM
Component: endpoint_security_tools

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle a...

📅 2021-05-24
CVSS 6.4 Dossier →
Component: gravityzone_business_security

Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to loa...

📅 2021-05-18
CVSS 7.8 Dossier →
Component: endpoint_security_tools

An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allo...

📅 2021-05-18
CVSS 4.0 Dossier →
Component: safepay

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing o...

📅 2021-04-12
CVSS 5.5 Dossier →
Component: hypervisor_introspection

Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData() results in multiple dereferences to th...

📅 2020-12-17
CVSS 7.8 Dossier →
Component: hypervisor_introspection

Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input val...

📅 2020-12-17
CVSS 6.1 Dossier →
Component: hypervisor_introspection

Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymExpandSymbol and IntLixTas...

📅 2020-12-17
CVSS 5.5 Dossier →
Page 2 of 5 (98 Total Records)