Patch & vulnerability status
Bitdefender
Bitdefender Endpoint 27.1.1.28
Latest tracked version 27.1.1.28. Release status, tracked CVEs, and automated cross-platform patching for Bitdefender Endpoint.
Category: Security
| Platform | Latest version | CVEs tracked | Last checked |
|---|---|---|---|
| Windows | 27.1.1.28 | 10 | 2024-11-01 |
Known vulnerabilities (CVEs) in Bitdefender Endpoint
Lavawall tracks 10 published CVEs affecting Bitdefender Endpoint, and deploys the versions that fix them automatically across your fleet.
| CVE | Published | Severity | Details | Vector |
|---|---|---|---|---|
| CVE-2025-7073 | 2025-12-10 10:16:02 | HIGH (9) | A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. The issue arises from bdservicehost.exe deleting files from a user-writable directory (C:\ProgramData\Atc\Feedback) without proper symbolic link validation, enabling arbitrary file deletion. This issue is chained with a file copy operation during network events and a filter driver bypass via DLL injection to achieve arbitrary file copy and code execution as elevated user. | LOCAL |
| CVE-2025-5317 | 2025-11-11 08:15:34 | MEDIUM (7) | An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the application directory (/Applications/Endpoint Security for Mac.app/) and the related directories within /Library/Bitdefender/AVP without needing the uninstall password. | LOCAL |
| CVE-2024-2224 | 2024-04-09 13:15:33 | HIGH (8) | Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects the following products that include the vulnerable component: Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1 | NETWORK |
| CVE-2024-2223 | 2024-04-09 13:15:33 | HIGH (8) | An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component: Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1 | NETWORK |
| CVE-2023-6154 | 2024-04-01 11:15:52 | HIGH (8) | A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114. | LOCAL |
| CVE-2020-8108 | 2020-08-03 12:15:12 | HIGH (9) | Improper Authentication vulnerability in Bitdefender Endpoint Security for Mac allows an unprivileged process to restart the main service and potentially inject third-party code into a trusted process. This issue affects: Bitdefender Endpoint Security for Mac versions prior to 4.12.80. | LOCAL |
| CVE-2020-8097 | 2020-08-30 21:15:12 | HIGH (8) | An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. Bitdefender Endpoint Security SDK versions prior to 6.6.18.261. | LOCAL |
| CVE-2020-8093 | 2020-01-30 19:15:12 | MEDIUM (8) | A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party code execution | LOCAL |
| CVE-2020-8092 | 2020-01-30 18:15:12 | MEDIUM (6) | A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to obtain authentication tokens for requests submitted to the Bitdefender Cloud. This issue affects: Bitdefender Bitdefender Antivirus for Mac versions prior to 8.0.0. | PHYSICAL |
| CVE-2019-17103 | 2020-01-27 14:15:11 | MEDIUM (6) | An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0. | PHYSICAL |
Why keeping Bitdefender Endpoint patched matters
Unpatched third-party applications are one of the most common ways attackers get in: 57% of breached MSP clients and 32% of ransomware cases trace back to a missing patch. Every Bitdefender Endpoint release that fixes a security bug is public, so attackers see it too, and an out-of-date install becomes a documented way in. Tracking the installed version on every machine and closing the gap quickly is what turns a disclosed CVE into a non-event.
How Lavawall® patches Bitdefender Endpoint
Lavawall® watches Bitdefender Endpoint releases and CVEs continuously, ranks each update by risk, and deploys it across your whole fleet, Windows, macOS, and Linux, from a single agent, independently of your RMM. You get one place to see which machines are behind on Bitdefender Endpoint, one policy to bring them current, and timestamped evidence for audits.
Frequently asked questions
What is the latest version of Bitdefender Endpoint?
Lavawall tracks Bitdefender Endpoint at version 27.1.1.28 (last checked 2024-11-01). New releases are monitored continuously and can be deployed automatically across your fleet.
Lavawall tracks Bitdefender Endpoint at version 27.1.1.28 (last checked 2024-11-01). New releases are monitored continuously and can be deployed automatically across your fleet.
Does Bitdefender Endpoint have known security vulnerabilities (CVEs)?
Lavawall tracks 10 CVEs for Bitdefender Endpoint and remediates them automatically as part of patching.
Lavawall tracks 10 CVEs for Bitdefender Endpoint and remediates them automatically as part of patching.
How do I patch Bitdefender Endpoint automatically?
Deploy the Lavawall® agent and Bitdefender Endpoint updates are applied automatically across Windows, macOS, and Linux, risk-ranked and reported, independently of your RMM.
Deploy the Lavawall® agent and Bitdefender Endpoint updates are applied automatically across Windows, macOS, and Linux, risk-ranked and reported, independently of your RMM.
Lavawall® monitors releases and CVEs for Bitdefender Endpoint through public information and proprietary statistical analysis, and can patch it automatically across your fleet.