Bitdefender · weakness class
File and Path Handling
20 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- likely to be exploited
- 1
Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.
- Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the id parameter…
- Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows…
- An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, a…
- Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode
- Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8604)
- Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)
- Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500)
- An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet S…
- Bitdefender Total Security Link Resolution Denial-of-Service Vulnerability
- Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)
- Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)
- Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)
- Process Control vulnerability in Bitdefender Antivirus Plus
- Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146)
- Untrusted Search Path Vulnerability in High-Level Antimalware SDK
- Privilege escalation in Bitdefender GravityZone Business Security
- Improper Quoting Path Issue in Bitdefender Total Security
- Untrusted Search Path Vulnerability in Bitdefender Antivirus Free 2020 (VA-8422)
- Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security
- Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.