CVE-2020-15732: Bitdefender Antivirus Plus

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security (HSTS) checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender Internet Security versions prior to 25.0.7.29. Bitdefender Antivirus Plus versions prior to 25.0.7.29.

Affected products

• Bitdefender Antivirus Plus: before 25.0.7.29 (fixed in 25.0.7.29)
• Bitdefender Internet Security: before 25.0.7.29 (fixed in 25.0.7.29)
• Bitdefender Total Security: before 25.0.7.29 (fixed in 25.0.7.29)

Published 2021-06-22. Last modified 2026-06-17.