CVE-2019-14242

MEDIUM

Bitdefender <6.6.8.115,23.0.24.120 - Code Injection

Title source: llm

Description

An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet Security, and Bitdefender Total Security versions prior to 23.0.24.120) that can lead to local code injection. A local attacker with administrator privileges can create a malicious DLL file in %SystemRoot%\System32\ that will be executed with local user privileges.

References (1)

[Vendor Advisory] https://www.bitdefender.com/support/security-advisories/code-injection-bitdefender-products-windows/

Scores

CVSS v3 6.7

EPSS 0.0012

EPSS Percentile 31.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-427

Status published

Affected Products (4)

bitdefender/antivirus_plus < 23.0.24.120

bitdefender/endpoint_security_tool < 6.6.8.115

bitdefender/internet_security < 23.0.24.120

bitdefender/total_security < 23.0.24.120

Timeline

Published Jul 30, 2019

Tracked Since Feb 18, 2026