CVE-2014-9642: bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.28...

Security readout for executives and security teams

CVE-2014-9642 is a local privilege escalation flaw in BullGuard security products before 15.0.288. A person or malware already running on an affected endpoint could abuse BullGuard's kernel driver to gain higher privileges. It is not described as remotely exploitable from the network. Exposure is most likely on legacy Windows endpoints still running BullGuard Antivirus, Internet Security, Premium Protection, or Online Backup earlier than 15.0.288. Current exposure cannot be inferred from the bundle because product deployment, support status, and patch availability are not provided. Prioritize remediation if legacy BullGuard software exists on business endpoints. The vulnerability is old and local-only, but it affects security software running with high privilege and has public exploit references, making it relevant for post-compromise escalation risk. Mitigation focus: Inventory endpoints for BullGuard products and exact installed versions.; Upgrade affected BullGuard installations to 15.0.288 or later where vendor guidance supports it.; If updates are unavailable, remove or replace unsupported affected software..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.