What’s Vulnerable › Vulnerabilities

CVE-2023-6154: Local privilege escalation in Bitdefender Total Security (VA-11168)

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-01 · updated 2026-06-17
• Weakness: CWE-15

Description

A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114.

Affected products

• Bitdefender Antivirus for Mac: 27.0.25.114
• Bitdefender Antivirus Plus: 27.0.25.114
• Bitdefender Internet Security: 27.0.25.114
• Bitdefender Total Security: 27.0.25.114

References

• https://bitdefender.com/support/security-advisories/local-privilege-escalation-in-bitdefender-total-security-va-11168/
• https://bitdefender.com/support/security-advisories/local-privilege-escalation-in-bitdefender-total-security-va-11168/

Get alerted when CVE-2023-6154 or the next vulnerability affects your stack