Vulnerabilities in Bitdefender

77 results
Vexday analysis

O portfólio de vulnerabilidades da Bitdefender apresenta um perfil de risco relativamente contido: nenhuma das 74 CVEs catalogadas figura no catálogo CISA KEV de exploração ativa, taxa que se situa abaixo da média geral do catálogo. O maior índice EPSS observado é de 0,0649, associado à CVE-2017-17408, que representa a ameaça ativa mais significativa no momento, ainda que sua probabilidade de exploração permaneça baixa em termos absolutos. A falha mais recorrente é CWE-295 (validação inadequada de certificados), o que merece atenção em ambientes onde a integridade das comunicações seguras é crítica, especialmente considerando que 8 vulnerabilidades atingem severidade crítica. A ausência de PoCs públicas reduz a superfície de risco imediato, mas as equipes de segurança devem monitorar as 2 CVEs surgidas nos últimos 90 dias e manter correções atualizadas diante do perfil de falhas de validação identificado.

CVE-2023-49570HIGHInsecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210)EPSS 0.2%CVE-2023-6057HIGHInsecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166)EPSS 0.2%CVE-2021-3423HIGHPrivilege escalation in Bitdefender GravityZone Business SecurityEPSS 0.2%CVE-2023-6154HIGHLocal privilege escalation in Bitdefender Total Security (VA-11168)EPSS 0.2%CVE-2022-0357MEDIUMImproper Quoting Path Issue in Bitdefender Total SecurityEPSS 0.2%CVE-2020-8094HIGHUntrusted Search Path Vulnerability in Bitdefender Antivirus Free 2020 (VA-8422)EPSS 0.2%CVE-2022-3369HIGHImproper handling of registry symbolic links in Bitdefender EnginesEPSS 0.2%CVE-2023-49567HIGHInsecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239)EPSS 0.2%CVE-2023-6058HIGHHTTPS Certificate Validation Issue in Bitdefender Safepay (VA-11167)EPSS 0.2%CVE-2025-7073HIGHLocal Privilege Escalation via Arbitrary File Operation in Bitdefender Total SecurityEPSS 0.2%CVE-2024-11128HIGHInsufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOSEPSS 0.2%CVE-2024-13870LOWUnauthenticated Firmware Downgrade in Bitdefender Box v1EPSS 0.2%CVE-2020-15734MEDIUMSame-origin policy vulnerability in Bitdefender SafepayEPSS 0.2%CVE-2026-6851HIGHImproper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)EPSS 0.1%CVE-2026-10047HIGHOut-of-bounds write in Napoca real-mode hook handler via guest-controlled SS:SP (VA-13905)EPSS 0.1%CVE-2026-10046HIGHOut-of-bounds write in Napoca BIOS INT 0x15 E820 memory map handler (VA-13905)EPSS 0.1%CVE-2025-5317MEDIUMImproper access restriction to critical folder in Bitdefender Endpoint Security Tools for MacEPSS 0.1%