Bitdefender Endpoint Security vulnerabilities

• bitdefender total security, antivirus, antivirus plus +2 more +4 more Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security CVE-2025-7073 8.8 HighDecember 10, 2025
• bitdefender endpoint security tools for mac, endpoint security +1 more Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac CVE-2025-5317 6.8 MediumNovember 11, 2025
• bitdefender endpoint security for linux, endpoint security, gravityzone +3 more +5 more Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466) CVE-2024-2224 8.1 HighApril 9, 2024
• bitdefender endpoint security for linux, endpoint security, gravityzone +3 more +5 more Incorrect Regular Expression in GravityZone Update Server (VA-11465) CVE-2024-2223 8.1 HighApril 9, 2024
• bitdefender endpoint security tools for linux, endpoint security tools for windows, endpoint security tools +2 more +4 more Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144) CVE-2022-0677 7.5 HighApril 7, 2022
• bitdefender antivirus plus, endpoint security tools for windows, endpoint security tools +2 more +4 more Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017) CVE-2021-4199 7.8 HighMarch 7, 2022
• bitdefender antivirus plus, endpoint security tools, internet security +2 more +4 more messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016) CVE-2021-4198 6.1 MediumMarch 7, 2022
• bitdefender endpoint security tools, gravityzone, unified endpoint for linux +2 more Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825) CVE-2021-3553 5.3 MediumNovember 24, 2021
• bitdefender endpoint security tools for linux, endpoint security tools, gravityzone +1 more +3 more Improper Access Control vulnerability in the patchesUpdate API CVE-2021-3554 9.0 CriticalNovember 24, 2021
• bitdefender endpoint security tools, gravityzone +1 more Insufficient validation on regular expression in EPPUpdateService config file (VA-9825) CVE-2021-3552 5.3 MediumNovember 24, 2021
• bitdefender endpoint security tools, total security +1 more Privilege escalation via SeImpersonatePrivilege CVE-2021-3576 7.8 HighOctober 28, 2021
• bitdefender endpoint security tools for windows, endpoint security tools, total security +2 more Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe CVE-2021-3579 7.8 HighOctober 28, 2021
• bitdefender endpoint security tools for linux, endpoint security tools +1 more Improper Input Validation in Bitdefender Endpoint Security Tools for Linux CVE-2021-3485 6.4 MediumMay 24, 2021
• bitdefender endpoint security tools for windows, endpoint security tools +1 more Scanning exclusion paths disclosure in BEST for Windows CVE-2020-15279 4.0 MediumMay 18, 2021
• bitdefender endpoint security sdk, endpoint security, endpoint security tools +1 more +3 more Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646) CVE-2020-8097 8.1 HighAugust 30, 2020
• bitdefender endpoint security for mac, endpoint security +1 more Insufficient client validation in Bitdefender Endpoint Security for Mac (VA-8759) CVE-2020-8108 8.2 HighAugust 3, 2020
• bitdefender endpoint security tools, epsecurityservice.exe +1 more Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500) CVE-2019-17099 5.3 MediumJanuary 27, 2020
• bitdefender antivirus plus, endpoint security tool, internet security +1 more +3 more An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool... CVE-2019-14242 6.7 MediumJuly 30, 2019