CVE-2020-8107: Bitdefender Antivirus Plus

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.

Affected products

• Bitdefender Antivirus Plus: before 24.0.26.136 (fixed in 24.0.26.136)
• Bitdefender Internet Security: before 24.0.26.136 (fixed in 24.0.26.136)
• Bitdefender Total Security: before 24.0.26.136 (fixed in 24.0.26.136)

Published 2022-02-18. Last modified 2026-06-17.