CVEs we hold for Bitdefender

Records whose assigning authority named Bitdefender as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-6851Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)Bitdefender Internet Security

CVE-2026-10047Out-of-bounds write in Napoca real-mode hook handler via guest-controlled SS:SP (VA-13905)Bitdefender Napoca bare-metal hypervisor

CVE-2026-10046Out-of-bounds write in Napoca BIOS INT 0x15 E820 memory map handler (VA-13905)Bitdefender Napoca bare-metal hypervisor

CVE-2025-7073Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total SecurityBitdefender Antivirus Plus

CVE-2025-5317Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for MacBitdefender Endpoint Security Tools for Mac

CVE-2025-2245Server Side Request Forgery in GravityZone Update Server Using Null Bytes (VA-12646)Bitdefender GravityZone Update Server

CVE-2025-2244Insecure PHP deserialization issue in GravityZone Console (VA-12634)Bitdefender GravityZone Console

CVE-2025-2243SSRF in GravityZone Console via DNS Truncation (VA-12634)Bitdefender GravityZone Console

CVE-2024-6980Verbose error handling issue in GravityZone Update Server proxy serviceBitdefender GravityZone Update Server

CVE-2024-4177Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)Bitdefender GravityZone Console On-Premise

CVE-2024-2224Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)Bitdefender Endpoint Security for Linux

CVE-2024-2223Incorrect Regular Expression in GravityZone Update Server (VA-11465)Bitdefender Endpoint Security for Linux

CVE-2024-13872Bitdefender Box Insecure Update Mechanism Vulnerability in libboxhermes.soBitdefender BOX v1

CVE-2024-13871Unauthenticated Command Injection in Bitdefender BOX v1Bitdefender BOX v1

CVE-2024-13870Unauthenticated Firmware Downgrade in Bitdefender Box v1Bitdefender BOX v1

CVE-2024-11128Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOSBitdefender Virus Scanner

CVE-2023-6154Local privilege escalation in Bitdefender Total Security (VA-11168)Bitdefender Antivirus Free

CVE-2023-6058HTTPS Certificate Validation Issue in Bitdefender Safepay (VA-11167)Bitdefender Total Security

CVE-2023-6057Insecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166)Bitdefender Total Security

CVE-2023-6056Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)BItdefender Total Security

CVE-2023-6055Improper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158)Bitdefender Total Security

CVE-2023-49570Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210)Bitdefender Total Security

CVE-2023-49567Insecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239)Bitdefender Total Security

CVE-2023-3633Out of Bounds Memory Corruption Issue in CEVA EngineBitdefender Engines

CVE-2022-3369Improper handling of registry symbolic links in Bitdefender EnginesBitdefender Engines

CVE-2022-2830Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573)Bitdefender GravityZone Cloud Console

CVE-2022-0677Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)Bitdefender Endpoint Security Tools for Windows

CVE-2022-0357Improper Quoting Path Issue in Bitdefender Total SecurityBitdefender Antivirus Plus

CVE-2021-4199Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)Bitdefender Endpoint Security Tools for Windows

CVE-2021-4198messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)Bitdefender VPN Standalone

CVE-2021-3960Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146)Bitdefender GravityZone

CVE-2021-3959Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)Bitdefender GravityZone

CVE-2021-3823Path traversal vulnerability in Bitdefender GravitZone Update Server in relay modeBitdefender GravityZone Update Server

CVE-2021-3641Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)Bitdefender GravityZone

CVE-2021-3579Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exeBitdefender Total Security

CVE-2021-3576Privilege escalation via SeImpersonatePrivilegeBitdefender Total Security

CVE-2021-3554Improper Access Control vulnerability in the patchesUpdate APIBitdefender GravityZone

CVE-2021-3553Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825)Bitdefender GravityZone

CVE-2021-3552Insufficient validation on regular expression in EPPUpdateService config file (VA-9825)Bitdefender GravityZone

CVE-2021-3485Improper Input Validation in Bitdefender Endpoint Security Tools for LinuxBitdefender Endpoint Security Tools for Linux

CVE-2021-3423Privilege escalation in Bitdefender GravityZone Business SecurityBItdefender GravityZone Business Security

CVE-2020-8110Bitdefender ceva_emu.cvd module denial-of-service (VA-8766)Bitdefender Engines

CVE-2020-8109Bitdefender ace.xmd parser out-of-bounds write (VA-8772)Bitdefender Engines

CVE-2020-8108Insufficient client validation in Bitdefender Endpoint Security for Mac (VA-8759)Bitdefender Endpoint Security for Mac

CVE-2020-8107Process Control vulnerability in Bitdefender Antivirus PlusBitdefender Total Security

CVE-2020-8103Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8604)Bitdefender Antivirus Free

CVE-2020-8102Insufficient URL sanitization and validation in Safepay Browser (VA-8631)Bitdefender Total Security 2020

CVE-2020-8100Incomplete validation in detection code in Bitdefender Engines (VA-8589)Bitdefender Engines

CVE-2020-8099Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)Bitdefender Antivirus Free

CVE-2020-8097Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646)Bitdefender Endpoint Security SDK

CVE-2020-8096Untrusted Search Path Vulnerability in High-Level Antimalware SDKBitdefender High-Level Antimalware SDK for Windows

CVE-2020-8095Bitdefender Total Security Link Resolution Denial-of-Service VulnerabilityBitdefender Total Security 2020

CVE-2020-8094Untrusted Search Path Vulnerability in Bitdefender Antivirus Free 2020 (VA-8422)Bitdefender Antivirus Free 2020

CVE-2020-8093Code Injection into Bitdefender AV for MacBitdefender Antivirus for Mac

CVE-2020-8092Privilege escalation in Bitdefender AV for MacBitdefender Antivirus for Mac

CVE-2020-15734Same-origin policy vulnerability in Bitdefender SafepayBitdefender Safepay

CVE-2020-15733URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)Bitdefender Antivirus Plus

CVE-2020-15732no title heldBitdefender Antivirus Plus

CVE-2020-15731Local Privilege Escalation in Bitdefender Engines (VA-8953)Bitdefender Engines

CVE-2020-15297no title heldBitdefender Update Server

CVE-2020-15294Compiler Optimization Removal or Modification of Security-Critical Code vulnerability in Bitdefender Hypervisor…Bitdefender Hypervisor Introspection

CVE-2020-15293Memory corruption in Bitdefender Hypervisor Introspection (VA-9336)Bitdefender Hypervisor Introspection

CVE-2020-15292Lack of validation on data read from guest memory in Bitdefender HVI (VA-9333)Bitdefender Hypervisor Introspection

CVE-2020-15279Scanning exclusion paths disclosure in BEST for WindowsBItdefenderd Endpoint Security Tools for Windows

CVE-2019-6738no title heldBitdefender SafePay

CVE-2019-6737no title heldBitdefender SafePay

CVE-2019-6736no title heldBitdefender SafePay

CVE-2019-17103Get-task-allow entitlement via BDLDaemon on macOSBitdefender AV for Mac

CVE-2019-17102Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)Bitdefender BOX 2

CVE-2019-17100Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)Bitdefender bdserviceshost.exe

CVE-2019-17099Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500)Bitdefender EPSecurityService.exe

CVE-2019-17096Bitdefender BOX 2 bootstrap get_image_size command injection vulnerabilityBitdefender BOX 2

CVE-2019-17095Bitdefender BOX 2 bootstrap download_image command injection vulnerabilityBitdefender BOX 2

CVE-2017-17410no title heldBitdefender Internet Security

CVE-2017-17409no title heldBitdefender Internet Security

CVE-2017-17408no title heldBitdefender Internet Security

CVE-2017-10954no title heldBitdefender Internet Security

77 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.