CVE-2021-3641: Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-11-09 · updated 2026-06-17
Weakness: CWE-59

Description

Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions.

Affected products

Bitdefender GravityZone: through 7.1.2.33

References

https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-gravityzone-va-9921
https://www.zerodayinitiative.com/advisories/ZDI-22-143/
https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-gravityzone-va-9921
https://www.zerodayinitiative.com/advisories/ZDI-22-143/

Get alerted when CVE-2021-3641 or the next vulnerability affects your stack