Bitdefender Hypervisor Introspection vulnerabilities

3 CVEs affecting Bitdefender Hypervisor Introspection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-15294, published 2020-12-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-15294, published 2020-12-17. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData() results in multiple dereferences to the same pointer. If the pointer is located in…
CVE-2020-15293, published 2020-12-17. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input validation may lead to denial of service conditions.
CVE-2020-15292, published 2020-12-17. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymExpandSymbol and IntLixTaskDumpTree may lead to out-of-bounds read or it…