Skip to content
OpenAdvisories
High · 7.8 CVE-2021-3579 EUVD-2021-26888GHSA-83r8-pm82-6w92

Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe

Published Oct 28, 2021 · Updated Sep 16, 2024 · Assigned by Bitdefender

Description

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.

Affected products

VendorProductAffectedFixed
Bitdefender ENdpoint Security Tools for Windows unspecified – < 7.2.1.65 7.2.1.65
Bitdefender Total Security unspecified – < 7.2.1.65 7.2.1.65

References