Endpoint Security Tools vulnerabilities

2 known vulnerabilities in Endpoint Security Tools from Bitdefender. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Total Security: Improper Link Resolution Before File Access

  CVE-2025-7073Dec 10, 2025Bitdefender

  A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\

• 7.5 High severity

  Update Server: Improper Handling of Length Parameter Inconsistency

  CVE-2022-0677Apr 7, 2022BitdefenderEPSS 1.25%

  Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bi