Bitdefender Antivirus Plus — known CVE vulnerabilities

Every CVE whose affected-product data names Bitdefender Antivirus Plus, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2020-8107 — CVSS 8.2 (high): A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product…
• CVE-2021-4199 — CVSS 7.8 (high): Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender…
• CVE-2025-7073 — CVSS 7.8 (high): A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to…
• CVE-2023-6154 — CVSS 7.8 (high): A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus…
• CVE-2017-6186 — CVSS 6.7 (medium): Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus…
• CVE-2019-14242 — CVSS 6.7 (medium): An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and…
• CVE-2022-0357 — CVSS 6.7 (medium): Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet…
• CVE-2020-15732 — CVSS 6.5 (medium): Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an…
• CVE-2020-15733 — CVSS 6.5 (medium): An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent…
• CVE-2021-4198 — CVSS 6.1 (medium): A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security…