What’s Vulnerable › Products
Bitdefender Endpoint Security Tools vulnerabilities
13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Check whether your Bitdefender Endpoint Security Tools version is affected
Latest Bitdefender Endpoint Security Tools vulnerabilities
- CVE-2025-7073 — Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security (CVSS 7.8)
- CVE-2022-0677 — Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144) (CVSS 7.5)
- CVE-2021-4199 — Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017) (CVSS 7.8)
- CVE-2021-4198 — messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016) (CVSS 6.1)
- CVE-2021-3554 — Improper Access Control vulnerability in the patchesUpdate API (CVSS 10.0)
- CVE-2021-3553 — Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825) (CVSS 7.5)
- CVE-2021-3552 — Insufficient validation on regular expression in EPPUpdateService config file (VA-9825) (CVSS 7.5)
- CVE-2021-3579 — Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe (CVSS 7.8)
- CVE-2021-3576 — Privilege escalation via SeImpersonatePrivilege (CVSS 7.8)
- CVE-2021-3485 — Improper Input Validation in Bitdefender Endpoint Security Tools for Linux (CVSS 6.6)
- CVE-2020-15279 — Scanning exclusion paths disclosure in BEST for Windows (CVSS 3.3)
- CVE-2020-8097 — Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646) (CVSS 7.8)
- CVE-2019-17099 — Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500) (CVSS 7.8)