Advisories · Technology
Bitdefender Total Security.
Every CVE that names Bitdefender Total Security among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)
- Bitdefender Total Security
- Bitdefender Internet Security
- Path traversal
- CVSS 8.8 High
Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security
- Bitdefender Total Security
- Bitdefender Internet Security
- Path traversal
- CVSS 8.6 High
Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210)
- Bitdefender Total Security
- Weak cryptography or TLS
- CVSS 8.6 High
Insecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239)
- Bitdefender Total Security
- Weak cryptography or TLS
- CVSS 8.6 High
HTTPS Certificate Validation Issue in Bitdefender Safepay (VA-11167)
- Bitdefender Total Security
- Weak cryptography or TLS
- CVSS 8.6 High
Insecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166)
- Bitdefender Total Security
- Weak cryptography or TLS
- CVSS 8.6 High
Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)
- BItdefender Total Security
- Weak cryptography or TLS
- CVSS 8.6 High
Improper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158)
- Bitdefender Total Security
- Weak cryptography or TLS
- CVSS 7.8 High
Local privilege escalation in Bitdefender Total Security (VA-11168)
- Bitdefender Total Security
- Bitdefender Internet Security
- CWE-15
- CVSS 6.7 Medium
Improper Quoting Path Issue in Bitdefender Total Security
- Bitdefender Total Security
- Bitdefender Internet Security
- CWE-428
- CVSS 7.8 High
Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)
- Bitdefender Total Security
- Bitdefender Internet Security
- Broken access control
- CVSS 6.1 Medium
messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)
- Bitdefender Total Security
- Bitdefender Internet Security
- Memory corruption
- CVSS 8.2 High
Process Control vulnerability in Bitdefender Antivirus Plus
- Bitdefender Antivirus Plus
- Bitdefender Internet Security
- CWE-114
- CVSS 7.8 High
Privilege escalation via SeImpersonatePrivilege
- Bitdefender Endpoint Security Tools
- Bitdefender Total Security
- Privilege escalation
- CVSS 7.8 High
Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe
- Bitdefender ENdpoint Security Tools for Windows
- Bitdefender Total Security
- Broken access control
- CVSS 6.5 Medium
Improper certificate validation in Bitdefender Total Security and others
- Bitdefender Total Security
- Bitdefender Internet Security
- Weak cryptography or TLS