Browse CVEs

HIGH 7.8 CVE-2026-10046 Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in… Napoca Mitigation only Fix from $1,9502026-06-02 HIGH 7.8 CVE-2026-10047 The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook handler, implemented in napoca/kerne… Napoca Mitigation only Fix from $1,9502026-06-02 HIGH 8.8 CVE-2024-13871 A command injection vulnerability exists in the /check_image_and_trigger_recovery API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490). Th… Box Firmware Mitigation only Fix from $1,9502025-03-12 CRITICAL 9.8 CVE-2024-2223 An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and … Endpoint Security Mitigation only Fix from $2,3002024-04-09 CRITICAL 9.8 CVE-2024-2224 Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone… Endpoint Security Mitigation only Fix from $2,3002024-04-09 HIGH 7.8 CVE-2023-6154 A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitd… Antivirus Mitigation only Fix from $1,9502024-04-01 MEDIUM 5.5 CVE-2020-15293 Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input va… Hypervisor Introspection Mitigation only Fix from $1,6002020-12-17 CRITICAL 9.8 CVE-2019-17095 A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method `… Box 2 Firmware No fix yet Fix from $2,3002020-01-27 HIGH 8.8 CVE-2019-6736 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction … Safepay Mitigation only Fix from $1,9502019-06-03 HIGH 8.8 CVE-2019-6737 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction … Safepay Mitigation only Fix from $1,9502019-06-03 HIGH 8.8 CVE-2019-6738 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction … Safepay Mitigation only Fix from $1,9502019-06-03 CRITICAL 9.8 CVE-2018-8955 The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remo… Gravityzone No fix yet Fix from $2,3002018-10-24 HIGH 7.8 CVE-2018-6183 BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an… Total Security Mitigation only Fix from $1,9502018-03-12 HIGH 7.0 CVE-2017-10950 This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Security 21.0.24.62. An attacker… Total Security Mitigation only Fix from $1,9502017-08-29 MEDIUM 6.2 CVE-2010-5154 Race condition in BitDefender Total Security 2010 13.0.20.347 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dange… Bitdefender Total Security 2010 Mitigation only Fix from $1,6002012-08-25 HIGH 9.3 CVE-2008-5409EPSS 11% Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet Security 8.5, an… Antivirus No fix yet Fix from $1,9502008-12-10 HIGH 7.8 CVE-2008-0396EPSS 9% Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Ent… Update Server No fix yet Fix from $1,9502008-01-23 CRITICAL 9.8 CVE-2007-5775EPSS 27% Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024. NOTE: as of 2007102… Antivirus No fix yet Fix from $2,3002007-11-01 HIGH 7.2 CVE-2007-0391 Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code… Bitdefender Client Mitigation only Fix from $1,9502007-01-19