VYPR
Unrated severityNVD Advisory· Published Nov 1, 2022· Updated May 2, 2025

Improper handling of registry symbolic links in Bitdefender Engines

CVE-2022-3369

Description

An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privileged registry keys by pointing a Registry symlink to a privileged key. This issue affects: Bitdefender Engines versions prior to 7.92659. It also affects Bitdefender Antivirus Free, Bitdefender Antivirus Plus, Bitdefender Internet Security, Bitdefender Total Security, as well as Bitdefender Endpoint Security Tools for Windows with engine versions prior to 7.92659.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Bitdefender/Enginesllm-create2 versions
    <7.92659+ 1 more
    • (no CPE)range: <7.92659
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.