CVE-2020-8103

HIGH

Bitdefender Antivirus Free <1.0.17.178 - Privilege Escalation

Title source: llm

Description

A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects Bitdefender Antivirus Free versions prior to 1.0.17.178.

Exploits (1)

nomisec WORKING POC 16 stars

by RedyOpsResearchLabs · poc

https://github.com/RedyOpsResearchLabs/-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

View Code ZIP pw:eip

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.bitdefender.com/support/security-advisories/link-resolution-privilege-escalation-vulnerability-bitdefender-antivirus-free-va-8604/

Scores

CVSS v3 7.2

EPSS 0.0212

EPSS Percentile 84.2%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Details

CWE

CWE-59

Status published

Products (1)

bitdefender/antivirus_2020 < 1.0.17.178

Published Jun 05, 2020

Tracked Since Feb 18, 2026