title: Improper Quoting Path Issue in Bitdefender Total Security
description: Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM.
This issue affects:
Bitdefender Total Security
versions prior to 26.0.10.45.
Bitdefender Internet Security
versions prior to 26.0.10.45.
Bitdefender Antivirus Plus
versions prior to 26.0.10.45.
problem types: CWE-428 Unquoted Search Path or Element
affected:
{
defaultStatus: unaffected
product: Total Security
vendor: Bitdefender
versions:
status: affected, version: 26.0.10.45
}
{
defaultStatus: unaffected
product: Internet Security
vendor: Bitdefender
versions:
status: affected, version: 26.0.10.45
}
{
defaultStatus: unaffected
product: Antivirus Plus
vendor: Bitdefender
versions:
status: affected, version: 26.0.10.45
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: An automatic update to version 26.0.10.45 or higher fixes the issue.