CVE-2021-3423: Bitdefender Gravityzone Business Security

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329.

Affected products

• Bitdefender Gravityzone Business Security: before 6.6.23.329 (fixed in 6.6.23.329)

Published 2021-05-18. Last modified 2026-06-17.