Log in Start free

Vulnerability · Published Apr 1, 2024 · Assigned by Bitdefender

CVE-2023-6154Local privilege escalation in Bitdefender Total Security (VA-11168)

High 7.8

In plain English

A high-severity security flaw in Antivirus Free from Bitdefender. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 90.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114.

Affected products (as reported)

VendorProductVersions
Bitdefender Total Security 27.0.25.114
Bitdefender Internet Security 27.0.25.114
Bitdefender Antivirus Plus 27.0.25.114
Bitdefender Antivirus Free 27.0.25.114

Weakness: CWE-15 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References