Vulnerabilidades em Bitdefender

77 resultados
Análise Vexday

O portfólio de vulnerabilidades da Bitdefender apresenta um perfil de risco relativamente contido: nenhuma das 74 CVEs catalogadas figura no catálogo CISA KEV de exploração ativa, taxa que se situa abaixo da média geral do catálogo. O maior índice EPSS observado é de 0,0649, associado à CVE-2017-17408, que representa a ameaça ativa mais significativa no momento, ainda que sua probabilidade de exploração permaneça baixa em termos absolutos. A falha mais recorrente é CWE-295 (validação inadequada de certificados), o que merece atenção em ambientes onde a integridade das comunicações seguras é crítica, especialmente considerando que 8 vulnerabilidades atingem severidade crítica. A ausência de PoCs públicas reduz a superfície de risco imediato, mas as equipes de segurança devem monitorar as 2 CVEs surgidas nos últimos 90 dias e manter correções atualizadas diante do perfil de falhas de validação identificado.

CVE-2017-17408—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. UserEPSS 6.5%CVE-2019-17095HIGHBitdefender BOX 2 bootstrap download_image command injection vulnerabilityEPSS 4.2%CVE-2017-10954—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security Internet SEPSS 4.0%CVE-2017-17409—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. UserEPSS 3.9%CVE-2019-6737HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User intEPSS 3.8%CVE-2017-17410—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. UserEPSS 3.7%CVE-2019-6736HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User intEPSS 3.7%CVE-2019-6738HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User intEPSS 3.7%CVE-2021-3554CRITICALImproper Access Control vulnerability in the patchesUpdate APIEPSS 2.7%CVE-2019-17096CRITICALBitdefender BOX 2 bootstrap get_image_size command injection vulnerabilityEPSS 2.1%CVE-2019-17102HIGHBitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)EPSS 1.9%CVE-2021-3959MEDIUMServer-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)EPSS 1.7%CVE-2021-3552MEDIUMInsufficient validation on regular expression in EPPUpdateService config file (VA-9825)EPSS 1.4%CVE-2021-3553MEDIUMServer-Side Request Forgery in EPPUpdateService remote config file (VA-9825)EPSS 1.3%CVE-2022-0677HIGHImproper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)EPSS 1.2%CVE-2020-8102HIGHInsufficient URL sanitization and validation in Safepay Browser (VA-8631)EPSS 1.1%CVE-2025-2244CRITICALInsecure PHP deserialization issue in GravityZone Console (VA-12634)EPSS 1.0%CVE-2021-3823HIGHPath traversal vulnerability in Bitdefender GravitZone Update Server in relay modeEPSS 1.0%CVE-2020-8100CRITICALIncomplete validation in detection code in Bitdefender Engines (VA-8589)EPSS 1.0%CVE-2021-3576HIGHPrivilege escalation via SeImpersonatePrivilegeEPSS 0.9%