VULNERABILITY INTELLIGENCE

CVE-2021-3579

CVSS score7.8 HIGH

EPSS probability0.69%

CISA KEVNot currently listed

Published2021-10-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.

Weakness classification

cve-requests@bitdefender.com: CWE-276
nvd@nist.gov: CWE-276

Primary references

cve-requests@bitdefender.com — Vendor Advisory
cve-requests@bitdefender.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry