Log in Start free

BItdefender

Products

ProductCVEsExploitedLatest
Total Security16–Jul 14, 2026
Antivirus Plus8–Dec 10, 2025
Internet Security8–Jul 14, 2026
GravityZone7–Apr 7, 2022
pybddisasm5–Nov 3, 2026
Endpoint Security Tools4–Mar 7, 2022
Bitdefender Engines4–Oct 2, 2020
Endpoint Security Tools for Linux3–Apr 7, 2022
Hypervisor Introspection3–Dec 17, 2020
GravityZone Update Server3–Apr 4, 2025
BOX v13–Mar 12, 2025
ENdpoint Security Tools for Windows3–Apr 7, 2022
Antivirus Free2–Apr 1, 2024
Bitdefender Antivirus for Mac2–Jan 29, 2020
Bitdefender Total Security 20202–Jun 22, 2020
Endpoint Security for Linux2–Apr 9, 2024
Endpoint Security for Windows2–Apr 9, 2024
Engines2–Jul 14, 2023
GravityZone Console2–Apr 4, 2025
GravityZone Console On-Premise2–Jun 6, 2024
GravityZone Control Center (On Premises)2–Apr 9, 2024
Napoca bare-metal hypervisor2–Jun 2, 2026
Unified Endpoint for Linux1–Nov 24, 2021
Update Server1–Apr 7, 2022
Virus Scanner1–Jan 13, 2025
Endpoint Security for Mac1–Aug 3, 2020
High-Level Antimalware SDK for Windows1–Apr 7, 2020
Endpoinit Security Tools for Windows1–Aug 30, 2020
Bitdefender Update Server1–Nov 9, 2020
VPN Standalone1–Mar 7, 2022
Bitdefender Antivirus Free1–Jun 5, 2020
Safepay1–Apr 12, 2021
SecurePass1–Jun 21, 2025
Antivirus Free 20201–Jan 15, 2025
Endpoint Security Tools for Mac1–Nov 11, 2025
Unified Endpoint1–Nov 24, 2021
Endpoint Security SDK1–Aug 30, 2020
GravityZone Business Security1–May 18, 2021
GravityZone Cloud Console1–Sep 5, 2022

Exploited and recent CVEs

  • CVE-2026-118448 Medium 6.9 Uninitialized output buffer returned after nd_to_text failure in pybddisasm 0.1%
  • CVE-2026-118447 Medium 4.8 Uninitialized INSTRUX contents returned after decoding failure in pybddisasm 0.1%
  • CVE-2026-118446 Medium 6.9 Use-after-free in INSTRUX array members in pybddisasm 0.1%
  • CVE-2026-118445 Medium 6.9 Use-after-free in INSTRUX structure members in pybddisasm 0.1%
  • CVE-2026-118444 Medium 4.8 Out-of-bounds reads during instruction decoding in pybddisasm 0.1%
  • CVE-2026-6851 High 7.0 Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681) 0.1%
  • CVE-2026-6851 High 7.0 Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681) 0.1%
  • CVE-2026-10047 High 8.5 Out-of-bounds write in Napoca real-mode hook handler via guest-controlled SS:SP (VA-13905) 0.1%
  • CVE-2026-10046 High 8.5 Out-of-bounds write in Napoca BIOS INT 0x15 E820 memory map handler (VA-13905) 0.1%
  • CVE-2025-7073 High 8.8 Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security 0.2%
  • CVE-2025-7073 High 8.8 Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security 0.2%
  • CVE-2025-7073 High 8.8 Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security 0.2%
  • CVE-2025-5317 Medium 6.8 Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac 0.1%
  • CVE-2025-1987 Critical 9.3 Stored XSS in Psono-Client via Malicious Vault Entry URLs 0.6%
  • CVE-2025-2245 Medium 6.9 Server Side Request Forgery in GravityZone Update Server Using Null Bytes (VA-12646) 0.3%
  • CVE-2025-2243 Medium 6.9 SSRF in GravityZone Console via DNS Truncation (VA-12634) 0.4%
  • CVE-2025-2244 Critical 9.5 Insecure PHP deserialization issue in GravityZone Console (VA-12634) 1.1%
  • CVE-2024-13870 Low 1.8 Unauthenticated Firmware Downgrade in Bitdefender Box v1 0.2%
  • CVE-2024-13871 Critical 9.4 Unauthenticated Command Injection in Bitdefender BOX v1 0.8%
  • CVE-2024-13872 Critical 9.4 Bitdefender Box Insecure Update Mechanism Vulnerability in libboxhermes.so 0.2%
  • CVE-2020-8094 High 8.8 Untrusted Search Path Vulnerability in Bitdefender Antivirus Free 2020 (VA-8422) 0.2%
  • CVE-2024-11128 High 8.4 Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS 0.2%
  • CVE-2023-49570 High 8.6 Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210) 0.2%
  • CVE-2023-49567 High 8.6 Insecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239) 0.2%
  • CVE-2023-6058 High 8.6 HTTPS Certificate Validation Issue in Bitdefender Safepay (VA-11167) 0.2%
  • CVE-2023-6057 High 8.6 Insecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166) 0.2%
  • CVE-2023-6056 High 8.6 Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164) 0.2%
  • CVE-2023-6055 High 8.6 Improper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158) 0.2%
  • CVE-2024-6980 Critical 9.2 Verbose error handling issue in GravityZone Update Server proxy service 0.6%
  • CVE-2024-4177 High 8.1 Host whitelist parser issue in GravityZone Console On-Premise (VA-11554) 0.4%