What is CVE-2024-11128?

CVE-2024-11128 is a high-severity vulnerability in Bitdefender Virus Scanner, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2025-01-13.

How severe is CVE-2024-11128?

High severity. CVSS v3 base score is 7.8 out of 10.

Privilege escalation in Bitdefender Virus Scanner

CVE-2024-11128

A vulnerability in the BitdefenderVirusScanner binary as used in Bitdefender Virus Scanner for MacOS may allow .dynamic library injection (DYLD injection) without being blocked by AppleMobileFileIntegrity (AMFI). This issue is caused by th…

Vulnerability class: Privilege Escalation

EPSS: 0.002 (5.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Bitdefender Virus Scanner — versions 0
Bitdefender Virus_scanner

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

cve-requests@bitdefender.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-11128?: CVE-2024-11128 is a high-severity vulnerability in Bitdefender Virus Scanner, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2025-01-13.
How severe is CVE-2024-11128?: High severity. CVSS v3 base score is 7.8 out of 10.