Back
CVE-2019-17099
Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500)
Medium5.3EPSS 0.65%
- Published
- Updated
- Reserved
- Assigned by
- Bitdefender
Description
An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefender EPSecurityService.exe versions prior to 6.6.11.163.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| BitdefenderCNA (assigner) | 3.1 | Medium5.3 | CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.65% · top 49% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.
Weakness
Affected products
Bitdefender · EPSecurityService.exe
- affected 6.6.11.162 and prior
What to do
Solution: Automatic update to version 6.6.11.163 mitigates the issue.
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2019-17099)Record last updated .