Skip to content

Bitdefender · weakness class

File and Path Handling

20 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

  1. Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the id parameter…CVE-2014-5350Bitdefender · 64% likely

    CWE-22

  2. Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows…CVE-2008-0396Bitdefender · 8.5% likely

    CWE-22

  3. An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, a…CVE-2019-15295Bitdefender · 1.4% likely

    CWE-426

  4. Path traversal vulnerability in Bitdefender GravitZone Update Server in relay modeCVE-2021-3823Bitdefender · CVSS 7.1 · 1.1% likely

    CWE-22

  5. Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8604)CVE-2020-8103Bitdefender · CVSS 7.2 · 0.8% likely

    CWE-59

  6. Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)CVE-2024-2224Bitdefender · CVSS 8.1 · 0.7% likely

    CWE-22

  7. Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500)CVE-2019-17099Bitdefender · CVSS 5.3 · 0.7% likely

    CWE-426

  8. An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet S…CVE-2019-14242Bitdefender · 0.6% likely

    CWE-427

  9. Bitdefender Total Security Link Resolution Denial-of-Service VulnerabilityCVE-2020-8095Bitdefender · CVSS 4.9 · 0.5% likely

    CWE-59

  10. Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)CVE-2020-8099Bitdefender · CVSS 7.1 · 0.4% likely

    CWE-59

  11. Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)CVE-2021-3641Bitdefender · CVSS 6.1 · 0.4% likely

    CWE-59

  12. Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)CVE-2019-17100Bitdefender · CVSS 5.2 · 0.3% likely

    CWE-426

  13. Process Control vulnerability in Bitdefender Antivirus PlusCVE-2020-8107Bitdefender · CVSS 8.2 · 0.3% likely

    CWE-114

  14. Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146)CVE-2021-3960Bitdefender · CVSS 7.1 · 0.3% likely

    CWE-22

  15. Untrusted Search Path Vulnerability in High-Level Antimalware SDKCVE-2020-8096Bitdefender · CVSS 6.3 · 0.3% likely

    CWE-426

  16. Privilege escalation in Bitdefender GravityZone Business SecurityCVE-2021-3423BItdefender · CVSS 7.8 · 0.2% likely

    CWE-427

  17. Improper Quoting Path Issue in Bitdefender Total SecurityCVE-2022-0357Bitdefender · CVSS 6.7 · 0.2% likely

    CWE-428

  18. Untrusted Search Path Vulnerability in Bitdefender Antivirus Free 2020 (VA-8422)CVE-2020-8094Bitdefender · CVSS 8.8 · 0.2% likely

    CWE-426

  19. Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total SecurityCVE-2025-7073Bitdefender · CVSS 8.8 · 0.2% likely

    CWE-59

  20. Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)CVE-2026-6851Bitdefender · CVSS 7 · 0.1% likely

    CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.