Bitdefender vulnerabilities

Products

• Total Security 25
• Total Security 21
• Gravityzone 18
• Antivirus Plus 13
• Endpoint Security Tools 13
• Internet Security 12
• Internet Security 12
• Antivirus Plus 10
• Antivirus 8
• Bitdefender 8
• Endpoint Security For Windows 8
• Engines 6
• Box Firmware 5
• Endpoint Security 5
• Pybddisasm 5
• Antivirus 2020 4
• Engines 4
• Internet Security 4
• Endpoint Security Tools 4
• Endpoint Security Tools For Windows 4
• Internet Security 2018 4
• Safepay 4
• Box 2 3
• Box 2 Firmware 3
• Box V1 3
• Endpoint Security Tools For Linux 3
• Gravityzone Update Server 3
• Hypervisor Introspection 3
• Hypervisor Introspection 3
• Scan Engines 3
• Total Security 2020 3
• Update Server 3
• Antivirus Free 2
• Antivirus For Mac 2
• Total Security 2020 2
• Endpoint Security For Linux 2
• Endpoint Security For Linux 2
• Endpoint Security For Windows 2
• Gravityzone Console 2
• Gravityzone Console On-premise 2

Show 4 moreShow less

• Gravityzone Control Center 2
• Gravityzone Control Center (on Premises) 2
• Napoca 2
• Napoca Bare-metal Hypervisor 2

Newest

• bitdefender pybddisasm Uninitialized output buffer returned after nd_to_text failure in pybddisasm CVE-2026-118448 6.9 MediumNovember 3, 2026
• bitdefender pybddisasm Uninitialized INSTRUX contents returned after decoding failure in pybddisasm CVE-2026-118447 4.8 MediumNovember 3, 2026
• bitdefender pybddisasm Use-after-free in INSTRUX array members in pybddisasm CVE-2026-118446 6.9 MediumNovember 3, 2026
• bitdefender pybddisasm Use-after-free in INSTRUX structure members in pybddisasm CVE-2026-118445 6.9 MediumNovember 3, 2026
• bitdefender pybddisasm Out-of-bounds reads during instruction decoding in pybddisasm CVE-2026-118444 4.8 MediumNovember 3, 2026
• bitdefender total security G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability CVE-2026-13268 7.8 HighJuly 29, 2026
• bitdefender internet security, total security +1 more Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681) CVE-2026-6851 7.0 HighJuly 14, 2026
• bitdefender napoca, napoca bare-metal hypervisor +1 more Out-of-bounds write in Napoca real-mode hook handler via guest-controlled SS:SP (VA-13905) CVE-2026-10047 8.5 HighJune 2, 2026
• bitdefender napoca, napoca bare-metal hypervisor +1 more Out-of-bounds write in Napoca BIOS INT 0x15 E820 memory map handler (VA-13905) CVE-2026-10046 8.5 HighJune 2, 2026
• bitdefender total security, antivirus, antivirus plus +2 more +4 more Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security CVE-2025-7073 8.8 HighDecember 10, 2025
• bitdefender endpoint security tools for mac, endpoint security +1 more Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac CVE-2025-5317 6.8 MediumNovember 11, 2025
• bitdefender securepass, psono psono-client, esaqa psono client +2 more Stored XSS in Psono-Client via Malicious Vault Entry URLs CVE-2025-1987 9.3 CriticalJune 21, 2025
• bitdefender gravityzone update server Server Side Request Forgery in GravityZone Update Server Using Null Bytes (VA-12646) CVE-2025-2245 6.9 MediumApril 4, 2025
• bitdefender gravityzone, gravityzone console +1 more SSRF in GravityZone Console via DNS Truncation (VA-12634) CVE-2025-2243 6.9 MediumApril 4, 2025
• bitdefender gravityzone, gravityzone console +1 more Insecure PHP deserialization issue in GravityZone Console (VA-12634) CVE-2025-2244 9.5 CriticalApril 4, 2025
• bitdefender box v1, box firmware +1 more Unauthenticated Firmware Downgrade in Bitdefender Box v1 CVE-2024-13870 1.8 LowMarch 12, 2025
• bitdefender box v1, box firmware +1 more Unauthenticated Command Injection in Bitdefender BOX v1 CVE-2024-13871 9.4 CriticalMarch 12, 2025
• bitdefender box v1, box firmware +1 more Bitdefender Box Insecure Update Mechanism Vulnerability in libboxhermes.so CVE-2024-13872 9.4 CriticalMarch 12, 2025
• bitdefender antivirus free 2020, antivirus 2020 +1 more Untrusted Search Path Vulnerability in Bitdefender Antivirus Free 2020 (VA-8422) CVE-2020-8094 8.8 HighJanuary 15, 2025
• bitdefender virus scanner Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS CVE-2024-11128 8.4 HighJanuary 13, 2025
• bitdefender total security G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability CVE-2024-6871 7.0 HighNovember 22, 2024
• bitdefender total security G DATA Total Security Scan Server Link Following Local Privilege Escalation Vulnerability CVE-2024-30377 7.8 HighNovember 22, 2024
• bitdefender total security G DATA Total Security Link Following Local Privilege Escalation Vulnerability CVE-2024-1868 7.8 HighNovember 22, 2024
• bitdefender total security G DATA Total Security Link Following Local Privilege Escalation Vulnerability CVE-2024-1867 7.8 HighNovember 22, 2024
• bitdefender total security Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210) CVE-2023-49570 8.6 HighOctober 18, 2024
• bitdefender total security Insecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239) CVE-2023-49567 8.6 HighOctober 18, 2024
• bitdefender total security HTTPS Certificate Validation Issue in Bitdefender Safepay (VA-11167) CVE-2023-6058 8.6 HighOctober 18, 2024
• bitdefender total security Insecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166) CVE-2023-6057 8.6 HighOctober 18, 2024
• bitdefender total security Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164) CVE-2023-6056 8.6 HighOctober 18, 2024
• bitdefender total security Improper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158) CVE-2023-6055 8.6 HighOctober 18, 2024
• avg internet security Local privilege escalation vulnerability in AVG Internet Security CVE-2024-6510 7.8 HighSeptember 12, 2024
• bitdefender gravityzone, gravityzone update server +1 more Verbose error handling issue in GravityZone Update Server proxy service CVE-2024-6980 9.2 CriticalJuly 31, 2024
• bitdefender gravityzone, gravityzone console on-premise +1 more Host whitelist parser issue in GravityZone Console On-Premise (VA-11554) CVE-2024-4177 8.1 HighJune 6, 2024
• bitdefender total security G DATA Total Security GDBackupSvc Service Link Following Local Privilege Escalation Vulnerability CVE-2023-42126 7.8 HighMay 3, 2024
• bitdefender antivirus plus, vipre antivirus +1 more VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability CVE-2023-32179 7.8 HighMay 3, 2024
• bitdefender antivirus plus, vipre antivirus +1 more VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability CVE-2023-32178 7.8 HighMay 3, 2024
• bitdefender antivirus plus, vipre antivirus +1 more VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability CVE-2023-32177 7.8 HighMay 3, 2024
• bitdefender antivirus plus, vipre antivirus +1 more VIPRE Antivirus Plus SetPrivateConfig Directory Traversal Local Privilege Escalation Vulnerability CVE-2023-32176 7.8 HighMay 3, 2024
• bitdefender antivirus plus, vipre antivirus +1 more VIPRE Antivirus Plus Link Following Local Privilege Escalation Vulnerability CVE-2023-32175 7.8 HighMay 3, 2024
• bitdefender total security G DATA Total Security Link Following Local Privilege Escalation Vulnerability CVE-2023-27347 7.8 HighMay 3, 2024
• bitdefender endpoint security for linux, endpoint security, gravityzone +3 more +5 more Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466) CVE-2024-2224 8.1 HighApril 9, 2024
• bitdefender endpoint security for linux, endpoint security, gravityzone +3 more +5 more Incorrect Regular Expression in GravityZone Update Server (VA-11465) CVE-2024-2223 8.1 HighApril 9, 2024
• avg antivirus free, bitdefender antivirus, antivirus plus +2 more +4 more Local privilege escalation in Bitdefender Total Security (VA-11168) CVE-2023-6154 7.8 HighApril 1, 2024
• bitdefender engines Out of Bounds Memory Corruption Issue in CEVA Engine CVE-2023-3633 8.1 HighJuly 14, 2023
• bitdefender antivirus plus, internet security, total security +2 more Improper Quoting Path Issue in Bitdefender Total Security CVE-2022-0357 6.7 MediumMay 24, 2023
• bitdefender engines Improper handling of registry symbolic links in Bitdefender Engines CVE-2022-3369 8.6 HighNovember 1, 2022
• bitdefender gravityzone, gravityzone cloud console, gravityzone console on-premise +2 more Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573) CVE-2022-2830 8.8 HighSeptember 5, 2022
• bitdefender endpoint security tools for linux, endpoint security tools for windows, endpoint security tools +2 more +4 more Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144) CVE-2022-0677 7.5 HighApril 7, 2022
• bitdefender antivirus plus, endpoint security tools for windows, endpoint security tools +2 more +4 more Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017) CVE-2021-4199 7.8 HighMarch 7, 2022
• bitdefender antivirus plus, endpoint security tools, internet security +2 more +4 more messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016) CVE-2021-4198 6.1 MediumMarch 7, 2022
• Show olderLoading…