Vulnerabilities > Bitdefender > High

DATE CVE VULNERABILITY TITLE RISK
2024-10-18 CVE-2023-49570 Improper Certificate Validation vulnerability in Bitdefender Total Security
A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software trusts a certificate issued by an entity that isn't authorized to issue certificates.
network
high complexity
bitdefender CWE-295
7.4
2024-10-18 CVE-2023-6055 Improper Certificate Validation vulnerability in Bitdefender Total Security
A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate website certificates.
network
high complexity
bitdefender CWE-295
7.4
2024-10-18 CVE-2023-6056 Improper Certificate Validation vulnerability in Bitdefender Total Security
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates.
network
high complexity
bitdefender CWE-295
7.4
2024-10-18 CVE-2023-6057 Improper Certificate Validation vulnerability in Bitdefender Total Security
A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of certificates issued using the DSA signature algorithm.
network
high complexity
bitdefender CWE-295
7.4
2023-07-14 CVE-2023-3633 Out-of-bounds Write vulnerability in Bitdefender Engines
An out-of-bounds write vulnerability in Bitdefender Engines on Windows causes the engine to crash. This issue affects Bitdefender Engines version 7.94791 and lower.
network
low complexity
bitdefender CWE-787
7.5
2023-05-24 CVE-2022-0357 Unquoted Search Path or Element vulnerability in Bitdefender Antivirus Plus, Internet Security and Total Security
Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45.
local
low complexity
bitdefender CWE-428
7.8
2022-04-07 CVE-2022-0677 Unspecified vulnerability in Bitdefender Endpoint Security Tools, Gravityzone and Update Server
Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service.
network
low complexity
bitdefender
7.5
2022-03-07 CVE-2021-4199 Incorrect Permission Assignment for Critical Resource vulnerability in Bitdefender products
Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM.
local
low complexity
bitdefender CWE-732
7.8
2022-02-18 CVE-2020-8107 Unspecified vulnerability in Bitdefender Antivirus Plus, Internet Security and Total Security
A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file.
local
low complexity
bitdefender
7.8
2021-12-16 CVE-2021-3959 Server-Side Request Forgery (SSRF) vulnerability in Bitdefender Gravityzone 3.3.8.249
A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server.
network
low complexity
bitdefender CWE-918
7.5