Bitdefender Total Security 2020 vulnerabilities

3 CVEs affecting Bitdefender Total Security 2020, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8102, published 2020-06-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-8102, published 2020-06-22. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay…
CVE-2020-8095, published 2020-01-30. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device.
CVE-2019-17100, published 2020-01-27. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total…