CVE-2023-6154

CVE-2023-6154 affects Bitdefender Total Security, Internet Security, Antivirus Plus, and Antivirus Free (all reported as 27.0.25.114). Root cause: a configuration setting issue in seccenter.exe that allows an attacker to change the product’s expected behavior and potentially load a third‑party li...

CVE-2007-5775

CVE-2007-5775 affects BitDefender Online Scanner ActiveX controls (OScan.ocx / OScan8.ocx). The vulnerability is a buffer overflow in the ActiveX control’s InitX/InitX-like handling and related Unicode processing, caused by improper validation and a double Unicode decoding, enabling a remote atta...

CVE-2008-1735

CVE-2008-1735 family involves multiple antivirus/firewall products where hooked SSDT functions do not validate arguments, enabling local denial-of-service via dereferencing invalid pointers. Affected: BitDefender Antivirus 2008 (Builds including 11.0.11), Comodo Firewall Pro, Sophos Antivirus 7.x...

CVE-2020-8093

Bitdefender Antivirus for Mac is affected by CVE-2020-8093 in the AntivirusforMac binary. The underlying issue allows an attacker to inject a library via the DYLD environment variable, enabling third-party code execution. This is described across multiple sources (NVD/CVE entry and vendor advisor...

CVE-2020-8092

CVE-2020-8092 affects Bitdefender Antivirus for Mac and its BDLDaemon. A privilege escalation allows a local attacker to obtain authentication tokens used for requests to the Bitdefender Cloud, impacting versions prior to 8.0.0. The root cause is a privilege/permission issue in BDLDaemon that ena...

CVE-2008-5409

The connected advisories confirm a memory corruption/DoS vulnerability in BitDefender/pdf.xmd that processes PDF streams (e.g., FlateDecode/ASCIIHexDecode). Affects BitDefender products using the pdf.xmd plugin (BitDefender Free Edition 10, Antivirus Standard 10; BullGuard Internet Security 8.5; ...

CVE-2019-17103

CVE-2019-17103 concerns an Incorrect Default Permissions issue in the BDLDaemon component of Bitdefender AV for Mac, enabling an attacker to elevate privileges to read protected directories. Affected software: Bitdefender AV for Mac, prior to version 8.0.0. Root cause: incorrect default permissio...

CVE-2025-7073

CVE-2025-7073 affects Bitdefender Total Security 27.0.46.231. The local privilege escalation stems from bdservicehost.exe deleting files in a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic-link validation. The issue is described as being chained with a file copy ope...