Bitdefender 多款产品信任管理问题漏洞

Bitdefender Antivirus Plus is a suite of antivirus software that provides network threat detection and ransomware protection.Bitdefender Internet Security is a suite of antivirus software that focuses on Internet security. Bitdefender Antivirus Plus is a suite of antivirus programs that provides...

Bitdefender Total Security Input Validation Error Vulnerability

Bitdefender Total Security is a security solution. An input validation error vulnerability exists in the Safepay browser component in versions prior to Bitdefender Total Security 2020 24.0.20.116. A remote attacker can exploit this vulnerability by running commands inside the Safepay Utility...

Input validation

Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116...

CVE-2020-8102 Insufficient URL sanitization and validation in Safepay Browser (VA-8631)

Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116...

Bitdefender Total Security Link Resolution Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of BitDefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2020-8095

A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device...

Design/Logic Flaw

A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device...

CVE-2020-8095 Bitdefender Total Security Link Resolution Denial-of-Service Vulnerability

A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device...

CVE-2020-8095

CVE-2020-8095 affects Bitdefender Total Security 2020, where the vulnerability lies in the incorrect handling of junctions. A local attacker with low privileges can exploit the flaw by creating a junction, abusing the service to delete arbitrary files, and causing a denial-of-service condition on...

CVE-2019-17100

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69...

Design/Logic Flaw

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69...

CVE-2019-17100

The CVE-2019-17100 entry describes an Untrusted Search Path vulnerability in bdserviceshost.exe used by Bitdefender Total Security 2020 . The issue could allow an attacker to execute arbitrary code, via a local attack vector, on affected installations. The vulnerability does not affect Bitdefende...

Bitdefender Total Security Insecure Pipeline Privilege Vulnerability

Bitdefender Total Security is a suite of antivirus programs from the Romanian company Bitdefender. A security vulnerability exists in BitDefender Total Security 2018 version. A local attacker can exploit the vulnerability to cause a denial of service or gain privileges by emulating all channels...

CVE-2018-6183

BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an "insecurely created named pipe". Ensures full access to Everyone users group...

Bitdefender Total Security Local Code Execution Vulnerability (CNVD-2017-35574)

Bitdefender Total Security is a security solution. A local code execution vulnerability exists in Bitdefender Total Security. A local attacker can exploit this issue to execute arbitrary code in the context of an affected application...

Bitdefender Total Security Local Code Execution Vulnerability

Bitdefender Total Security is a security solution. A local code execution vulnerability exists in Bitdefender Total Security. A local attacker can exploit this issue to execute arbitrary code in the context of an affected application...

CVE-2017-10950

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Design/Logic Flaw

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Bitdefender Total Security bdfwfpf Kernel Driver Twice-Released Elevation of Privilege Vulnerability

Bitdefender Total Security is a security solution. Bitdefender Total Security bdfwfpf driver handles 0x8000E038 IOCTL A security vulnerability exists that allows a local attacker to submit a specially crafted request to execute arbitrary code in the SYSTEM context...

Bitdefender Total Security bdfwfpf Kernel Driver Double Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...