CVE-2022-0357

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM.

This issue affects:

Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-428

Affected software

Vendor	Product	Versions
Bitdefender	Total Security	26.0.10.45
Bitdefender	Internet Security	26.0.10.45
Bitdefender	Antivirus Plus	26.0.10.45

References

Timeline

Published: May 24, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-03587.8A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405 CVE-2022-03597.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-03604.8The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, CVE-2022-03617.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-03629.8SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.CVE-2022-03634.3The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the mycred-tools-import-export AJAX action, al CVE-2022-03645.4The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which coul CVE-2022-03659.8The affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary she CVE-2022-03668.8An authenticated and authorized agent user could potentially gain administrative access via an SQLi vulnerability to Capsule8 Console betwee CVE-2022-03677.8A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.CVE-2022-03687.8Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-03698.8Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows