ZDI-CAN-13968: (0Day) Bitdefender Total Security Unnecessary Privileges Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the endpoint client. The issue results from allowing an untrusted process to impersonate the client of a pipe. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-13968?
The severity of ZDI-CAN-13968 is significant as it allows local attackers to escalate privileges on affected systems.
How do I fix ZDI-CAN-13968?
To fix ZDI-CAN-13968, update Bitdefender Total Security to the latest version released by Bitdefender.
Who is affected by ZDI-CAN-13968?
Users of Bitdefender Total Security are affected by the ZDI-CAN-13968 vulnerability.
What type of attacks can exploit ZDI-CAN-13968?
ZDI-CAN-13968 can be exploited by local attackers who have the ability to execute low-privileged code.
Is ZDI-CAN-13968 remote or local vulnerability?
ZDI-CAN-13968 is a local vulnerability requiring access to the affected system for exploitation.