{"id":"CVE-2022-0357","aliases":["EUVD-2022-15513","GHSA-fh44-vj54-q7h7"],"status":"published","title":"Improper Quoting Path Issue in Bitdefender Total Security","description":"Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM.\n\nThis issue affects:\n\nBitdefender Total Security\nversions prior to 26.0.10.45.\nBitdefender Internet Security\nversions prior to 26.0.10.45.\nBitdefender Antivirus Plus\nversions prior to 26.0.10.45.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00188,"percentile":0.08432,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-428"],"published":"2023-05-24T07:53:32Z","modified":"2026-06-17T04:20:27Z","products":[{"vendor":"bitdefender","product":"antivirus plus"},{"vendor":"bitdefender","product":"antivirus_plus"},{"vendor":"bitdefender","product":"internet security"},{"vendor":"bitdefender","product":"internet_security"},{"vendor":"bitdefender","product":"total security"},{"vendor":"bitdefender","product":"total_security"}],"references":[{"url":"https://www.bitdefender.com/support/security-advisories/improper-quoting-path-issue-in-bitdefender-total-security","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0357"},{"url":"https://github.com/advisories/GHSA-fh44-vj54-q7h7"}],"sources":{"cve":[{"id":"CVE-2022-0357","title":"Improper Quoting Path Issue in Bitdefender Total Security","description":"Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM.\n\nThis issue affects:\n\nBitdefender Total Security\nversions prior to 26.0.10.45.\nBitdefender Internet Security\nversions prior to 26.0.10.45.\nBitdefender Antivirus Plus\nversions prior to 26.0.10.45.","status":"published","published":"2023-05-24T07:53:32.812Z","modified":"2025-01-16T15:43:43.255Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:34:42.028422Z"}],"euvd":[{"id":"EUVD-2022-15513","description":"Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM.\n\nThis issue affects:\n\nBitdefender Total Security\nversions prior to 26.0.10.45.\nBitdefender Internet Security\nversions prior to 26.0.10.45.\nBitdefender Antivirus Plus\nversions prior to 26.0.10.45.","status":"published","published":"2023-05-24T07:53:32Z","modified":"2025-01-16T15:43:43Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:18.582094Z"}],"ghsa":[{"id":"GHSA-fh44-vj54-q7h7","title":"Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender...","description":"Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM.\n\nThis issue affects:\n\nBitdefender Total Security\nversions prior to 26.0.10.45.\nBitdefender Internet Security\nversions prior to 26.0.10.45.\nBitdefender Antivirus Plus\nversions prior to 26.0.10.45.","status":"published","published":"2023-05-24T09:30:25Z","modified":"2024-04-04T04:19:34Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:56:22.887174Z"}],"nvd":[{"id":"CVE-2022-0357","description":"Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM.\n\nThis issue affects:\n\nBitdefender Total Security\nversions prior to 26.0.10.45.\nBitdefender Internet Security\nversions prior to 26.0.10.45.\nBitdefender Antivirus Plus\nversions prior to 26.0.10.45.","status":"published","published":"2023-05-24T08:15:08.957Z","modified":"2026-06-17T04:20:27.18Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:07:38.721429Z"}]}}