Vulnerabilities > Bitdefender > Total Security > 21.0.24.62

DATE CVE VULNERABILITY TITLE RISK
2021-10-28 CVE-2021-3576 Improper Privilege Management vulnerability in Bitdefender Endpoint Security Tools and Total Security
Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System.
local
low complexity
bitdefender CWE-269
7.8
2021-06-22 CVE-2020-15732 Improper Certificate Validation vulnerability in Bitdefender Antivirus Plus, Internet Security and Total Security
Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security (HSTS) checks.
network
low complexity
bitdefender CWE-295
7.5
2019-07-30 CVE-2019-14242 Uncontrolled Search Path Element vulnerability in Bitdefender products
An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet Security, and Bitdefender Total Security versions prior to 23.0.24.120) that can lead to local code injection.
local
low complexity
bitdefender CWE-427
6.7
2017-08-29 CVE-2017-10950 Double Free vulnerability in Bitdefender Total Security 21.0.24.62
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62.
local
high complexity
bitdefender CWE-415
7.0