Bitdefender Endpoint_security_tools
13 CVEs affecting Bitdefender Endpoint_security_tools. Latest disclosed: 2025-12-10. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3554 | Critical | 9.0 | 2021-11-24 | Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attack… |
CVE-2020-8097 | High | 8.1 | 2020-08-30 | An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local… |
CVE-2025-7073 | High | 7.8 | 2025-12-10 | A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. T… |
CVE-2021-4199 | High | 7.8 | 2022-03-07 | Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Interne… |
CVE-2021-3579 | High | 7.8 | 2021-10-28 | Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for W… |
CVE-2021-3576 | High | 7.8 | 2021-10-28 | Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\… |
CVE-2022-0677 | High | 7.5 | 2022-04-07 | Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), Gravit… |
CVE-2021-3485 | Medium | 6.4 | 2021-05-24 | An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker t… |
CVE-2021-4198 | Medium | 6.1 | 2022-03-07 | A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint… |
CVE-2021-3553 | Medium | 5.3 | 2021-11-24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protec… |
CVE-2021-3552 | Medium | 5.3 | 2021-11-24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy request… |
CVE-2019-17099 | Medium | 5.3 | 2020-01-27 | An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker… |
CVE-2020-15279 | Medium | 4.0 | 2021-05-18 | An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regu… |