VULNERABILITY INTELLIGENCE

CVE-2019-17099

CVSS score5.3 MEDIUM
EPSS probability0.65%
CISA KEVNot currently listed
Published2020-01-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L

Description

An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefender EPSecurityService.exe versions prior to 6.6.11.163.

Weakness classification

  • cve-requests@bitdefender.com: CWE-426
  • nvd@nist.gov: CWE-426

Primary references