CVE-2023-6154highCWE-15

CVE-2023-6154: high-severity vulnerability in Bitdefender Total Security

Local privilege escalation in Bitdefender Total Security (VA-11168)

Published · Updated

Follow this CVE+ Monitor Total Security+ Monitor Internet Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.2%
A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Bitdefender · Antivirus FreeBitdefender · Antivirus PlusBitdefender · Internet SecurityBitdefender · Total Security
Related CVEs — Bitdefender Total Security

In the same product, most dangerous first.

CVE-2021-4199HIGHIncorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)EPSS 0.8%CVE-2020-15733MEDIUMURL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)EPSS 0.6%CVE-2020-15732MEDIUMCVE-2020-15732EPSS 0.6%CVE-2021-4198MEDIUMmessaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)EPSS 0.5%CVE-2020-8099HIGHLink Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)EPSS 0.4%CVE-2020-8107HIGHProcess Control vulnerability in Bitdefender Antivirus PlusEPSS 0.3%