Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Bitdefender — Vulnerabilities & Security Advisories 76

Browse all 76 CVE security advisories affecting Bitdefender. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Bitdefender operates primarily as a cybersecurity firm specializing in endpoint protection, antivirus software, and threat intelligence services for both consumer and enterprise markets. Its extensive product portfolio, including antivirus engines and security suites, has historically been associated with various vulnerability classes, notably remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws within its desktop applications and web interfaces. With 73 CVEs currently on record, these issues often stem from improper input validation, insecure default configurations, or memory corruption errors in legacy components. While the company maintains a robust security posture through regular updates and a dedicated bug bounty program, past incidents highlight the complexity of securing comprehensive security platforms. These vulnerabilities typically require local access or specific user interactions to exploit, though some remote vectors have been identified, emphasizing the need for diligent patch management across its diverse software ecosystem.

Found 3 results / 76 Clear Filters
Top products by Bitdefender: Total Security Bitdefender Internet Security SafePay Bitdefender Engines Bitdefender BOX 2 BOX v1 Hypervisor Introspection GravityZone Update Server GravityZone Endpoint Security Tools Napoca bare-metal hypervisor GravityZone Console GravityZone Control Center (On Premises) Engines GravityZone Console On-Premise Endpoint Security Tools for Linux Bitdefender Total Security 2020 Bitdefender Antivirus for Mac Antivirus Plus EPSecurityService.exe Bitdefender Antivirus Free Endpoint Security Tools for Mac bdserviceshost.exe Bitdefender AV for Mac Antivirus Free 2020 Virus Scanner Bitdefender Update Server Update Server High-Level Antimalware SDK for Windows ENdpoint Security Tools for Windows
CVE ID Title CVSS Severity Published
CVE-2025-2245 Server Side Request Forgery in GravityZone Update Server Using Null Bytes (VA-12646) — GravityZone Update Server CWE-918 9.1AI Critical AI 2025-04-04
CVE-2024-6980 Verbose error handling issue in GravityZone Update Server proxy service — GravityZone Update Server CWE-209 9.8AI Critical AI 2024-07-31
CVE-2021-3823 Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode — GravityZone Update Server CWE-22 7.1 High 2021-10-28

This page lists every published CVE security advisory associated with Bitdefender. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.