CVE-2019-15295

HIGH 7.8CVE-2019-15295 · Published 21/08/2019 · updated 17/06/2026

In short

CVE-2019-15295 is a HIGH (CVSS 7.8) vulnerability affecting antivirus 2020 (bitdefender).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.9% of all vulnerabilities.
Fix: update to 1.0.15.138 or later.

Package	Affected versions	Patched versions
antivirus 2020 bitdefender	`< 1.0.15.138`	`1.0.15.138`

Description

An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path.

References

safebreach.com/Post/BitDefender-Antivirus-Free-2020-Privilege-Escalation-to-SYSTEM · Third Party Advisory
bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-serviceinstance-dll-bitdefender-antivirus-free-2020 · Vendor Advisory

More vulnerabilities in antivirus 2020

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

antivirus 2020

bitdefender

< 1.0.15.138

1.0.15.138

More vulnerabilities in antivirus 2020

See all →