CVE-2021-3641

Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions.

• CWE-59
• CWE-59

• https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-gravityzone-va-9921Broken Link, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-143/Third Party Advisory, VDB Entry
• https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-gravityzone-va-9921Broken Link, Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-143/Third Party Advisory, VDB Entry

Published

Nov 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36400In Moodle, insufficient capability checks made it possible t…5.3
• CVE-2021-36401In Moodle, ID numbers exported in HTML data formats required…4.8
• CVE-2021-36402In Moodle, Users' names required additional sanitizing in th…5.3
• CVE-2021-36403In Moodle, in some circumstances, email notifications of mes…5.3
• CVE-2021-36408An issue was discovered in libde265 v1.0.8.There is a Heap-u…5.5
• CVE-2021-36409There is an Assertion `scaling_list_pred_matrix_id_delta==1'…7.8
• CVE-2021-36410A stack-buffer-overflow exists in libde265 v1.0.8 via fallba…5.5
• CVE-2021-36411An issue has been found in libde265 v1.0.8 due to incorrect …5.5
• CVE-2021-36412A heap-based buffer overflow vulnerability exists in MP4Box …7.8
• CVE-2021-36414A heab-based buffer overflow vulnerability exists in MP4Box …7.8
• CVE-2021-36417A heap-based buffer overflow vulnerability exists in GPAC v1…7.8
• CVE-2021-3642A flaw was found in Wildfly Elytron in versions prior to 1.1…5.3