CVE-2021-3641: Bitdefender Gravityzone

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions.

Affected products

• Bitdefender Gravityzone: up to and including 7.1.2.33

Published 2021-11-09. Last modified 2026-06-17.