Endpoint security tools

This hub aggregates every CVE we track for Endpoint security tools, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Endpoint security tools.

• CVE-2025-7073Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security7.8Dec 10, 2025
• CVE-2022-0677Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)7.5Apr 7, 2022
• CVE-2021-4199Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)7.8Mar 7, 2022
• CVE-2021-4198messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)6.1Mar 7, 2022
• CVE-2021-3553Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825)5.3Nov 24, 2021
• CVE-2021-3554Improper Access Control vulnerability in the patchesUpdate API9.0Nov 24, 2021
• CVE-2021-3552Insufficient validation on regular expression in EPPUpdateService config file (VA-9825)5.3Nov 24, 2021
• CVE-2021-3576Privilege escalation via SeImpersonatePrivilege7.8Oct 28, 2021
• CVE-2021-3579Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe7.8Oct 28, 2021
• CVE-2021-3485Improper Input Validation in Bitdefender Endpoint Security Tools for Linux6.4May 24, 2021
• CVE-2020-15279Scanning exclusion paths disclosure in BEST for Windows4.0May 18, 2021
• CVE-2020-8097Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646)8.1Aug 30, 2020
• CVE-2019-17099Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500)5.3Jan 27, 2020