As a trusted member of the security industry, Bitdefender continually assesses our own products. We also receive and welcome vulnerability advisories via Bug Bounty programs, and support security vendor transparency in reporting.

CVE ID Published Title Product
CVE-2021-3959 December 16, 2021 Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145) Bitdefender GravityZone Business Security
CVE-2021-3554 November 24, 2021 Improper Access Control vulnerability in patchesUpdate API (VA-9825) Bitdefender Endpoint Security Tools for Linux
CVE-2021-3553 November 24, 2021 Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825) Bitdefender Endpoint Security Tools
CVE-2021-3552 November 24, 2021 Insufficient validation on regular expression in EPPUpdateService config file (VA-9825) Bitdefender Endpoint Security Tools
CVE-2021-3641 November 9, 2021 Improper Link Resolution Before File Access in Bitdefender Endpoint Security Tools for Windows (VA-9921) Bitdefender Endpoint Security Tools
CVE-2021-3823 October 28, 2021 Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode (VA-10039) Bitdefender GravityZone Business Security
CVE-2021-3579 October 28, 2021 Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe (VA-9848) Bitdefender Endpoint Security Tools
CVE-2021-3576 October 28, 2021 Privilege escalation via SeImpersonatePrivilege in Bitdefender Endpoint Security Tools (VA-9848) Bitdefender Endpoint Security Tools
CVE-2020-15744 August 30, 2021 Stack-Based Buffer Overflow Leading To RCE In Victure Camera External
CVE-2020-15732 June 22, 2021 Improper Certificate Validation in Bitdefender Total Security (VA-8957) Bitdefender Antivirus Plus
1 … 4 5 6 7 8 … 11