Bitdefender Antivirus 2020 vulnerabilities

4 CVEs affecting Bitdefender Antivirus 2020, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8094, published 2025-01-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-15295, published 2019-08-21. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to…
CVE-2020-8103, published 2020-06-05. High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This…
CVE-2020-8099, published 2020-04-21. Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This…
CVE-2020-8094, published 2025-01-15. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An untrusted search path vulnerability in testinitsigs.exe as used in Bitdefender Antivirus Free 2020 allows a low-privilege attacker to execute code as SYSTEM via a specially crafted DLL file.