VULNERABILITY INTELLIGENCE

CVE-2019-15295

CVSS score7.8 HIGH
EPSS probability1.42%
CISA KEVNot currently listed
Published2019-08-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path.

Weakness classification

  • nvd@nist.gov: CWE-426

Primary references