Bitdefender vulnerabilities
82 CVEs and advisories name Bitdefender as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-118448Uninitialized output buffer returned after nd_to_text failure in pybddisasm
- CVE-2026-118447Uninitialized INSTRUX contents returned after decoding failure in pybddisasm
- CVE-2026-118446Use-after-free in INSTRUX array members in pybddisasm
- CVE-2026-118445Use-after-free in INSTRUX structure members in pybddisasm
- CVE-2026-118444Out-of-bounds reads during instruction decoding in pybddisasm
- CVE-2026-6851Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)
- CVE-2026-10047Out-of-bounds write in Napoca real-mode hook handler via guest-controlled SS:SP (VA-13905)
- CVE-2026-10046Out-of-bounds write in Napoca BIOS INT 0x15 E820 memory map handler (VA-13905)
- CVE-2025-7073Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security
- CVE-2025-5317Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac
- CVE-2025-1987Stored XSS in Psono-Client via Malicious Vault Entry URLs
- CVE-2025-2245Server Side Request Forgery in GravityZone Update Server Using Null Bytes (VA-12646)
- CVE-2025-2243SSRF in GravityZone Console via DNS Truncation (VA-12634)
- CVE-2025-2244Insecure PHP deserialization issue in GravityZone Console (VA-12634)
- CVE-2024-13870Unauthenticated Firmware Downgrade in Bitdefender Box v1
- CVE-2024-13871Unauthenticated Command Injection in Bitdefender BOX v1
- CVE-2024-13872Bitdefender Box Insecure Update Mechanism Vulnerability in libboxhermes.so
- CVE-2020-8094Untrusted Search Path Vulnerability in Bitdefender Antivirus Free 2020 (VA-8422)
- CVE-2024-11128Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS
- CVE-2023-49570Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210)
- CVE-2023-49567Insecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239)
- CVE-2023-6058HTTPS Certificate Validation Issue in Bitdefender Safepay (VA-11167)
- CVE-2023-6057Insecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166)
- CVE-2023-6056Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)
- CVE-2023-6055Improper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158)
- CVE-2024-6980Verbose error handling issue in GravityZone Update Server proxy service
- CVE-2024-4177Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)
- CVE-2024-2224Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)
- CVE-2024-2223 Incorrect Regular Expression in GravityZone Update Server (VA-11465)
- CVE-2023-6154Local privilege escalation in Bitdefender Total Security (VA-11168)