CVE-2021-4199

Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.3.146.

• CWE-732
• CWE-732

• https://www.bitdefender.com/support/security-advisories/incorrect-permission-assignment-for-critical-resource-vulnerability-in-bdreinit-exe-va-10017/Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-484/Third Party Advisory
• https://www.bitdefender.com/support/security-advisories/incorrect-permission-assignment-for-critical-resource-vulnerability-in-bdreinit-exe-va-10017/Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-484/Third Party Advisory

Published

Mar 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41984Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-41985Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-41986Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-41987In the SCEP Server of RouterOS in certain Mikrotik products,…8.1
• CVE-2021-41988Qlik NPrinting Designer through 21.14.3.0 creates a Temporar…7.8
• CVE-2021-41989Qlik QlikView through 12.60.20100.0 creates a Temporary File…7.8
• CVE-2021-41990The gmp plugin in strongSwan before 5.9.4 has a remote integ…7.5
• CVE-2021-41991The in-memory certificate cache in strongSwan before 5.9.4 h…7.5
• CVE-2021-41992A misconfiguration of RSA in PingID Windows Login prior to 2…5.6
• CVE-2021-41993A misconfiguration of RSA in PingID Android app prior to 1.1…4.8
• CVE-2021-41994A misconfiguration of RSA in PingID iOS app prior to 1.19 is…4.8
• CVE-2021-41995A misconfiguration of RSA in PingID Mac Login prior to 1.1 i…7.5