CVE-2021-3579: Bitdefender Endpoint Security Tools

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.

Affected products

• Bitdefender Endpoint Security Tools: before 7.2.1.65 (fixed in 7.2.1.65)
• Bitdefender Total Security: before 7.2.1.65 (fixed in 7.2.1.65)

Published 2021-10-28. Last modified 2026-06-17.