ES
Product
Endpoint Security Tools
13
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 2Low 1
Watch
Add Endpoint Security Tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-7073 | 7.8 | Dec 10 | Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security Affected: before 7.9.20.515 |
| CVE-2021-4199 | 7.8 | Mar 7 | Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security,… Affected: before 7.4.3.146 |
| CVE-2021-3579 | 7.8 | Oct 28 | Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total… Affected: before 7.2.1.65 |
| CVE-2021-3576 | 7.8 | Oct 28 | Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System Affected: before 7.2.1.65 |
| CVE-2020-8097 | 7.8 | Aug 30 | An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate… Affected: before 6.6.18.261 |
| CVE-2019-17099 | 7.8 | Jan 27 | An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary… Affected: before 6.6.11.163 |
| CVE-2022-0677 | 7.5 | Apr 7 | Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update… Affected: before 6.2.21.171; before 7.4.1.111 |
| CVE-2021-3553 | 7.5 | Nov 24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a… Affected: before 6.2.21.160; 6.6.27.0 before 6.6.27.390; 7.0.0.00 before 7.1.2.33 |
| CVE-2021-3552 | 7.5 | Nov 24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay… Affected: before 6.2.21.160; 6.6.27.0 before 6.6.27.390; 7.0.0.00 before 7.1.2.33 |
Showing 9