As a trusted member of the security industry, Bitdefender continually assesses our own products. We also receive and welcome vulnerability advisories via Bug Bounty programs, and support security vendor transparency in reporting.

CVE ID Published Title Product
CVE-2023-49570 October 18, 2024 Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210) Bitdefender Total Security
CVE-2023-49567 October 18, 2024 Insecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239) Bitdefender Total Security
CVE-2023-6058 October 18, 2024 HTTPS Certificate Validation Issue in Bitdefender Safepay (VA-11167) Bitdefender SafePay
CVE-2023-6057 October 18, 2024 Insecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166) Bitdefender Total Security
CVE-2023-6056 October 18, 2024 Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164) Bitdefender Total Security
CVE-2023-6055 October 18, 2024 Improper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158) Bitdefender Total Security
CVE-2024-6980 July 31, 2024 Verbose error handling in GravityZone Update Server proxy service Bitdefender GravityZone Console
CVE-2024-3297 July 24, 2024 Session establishment lock-up during replay of CASE Sigma1 messages External
CVE-2024-3454 July 24, 2024 In-Fabric Matter Cluster Attribute Disclosure External
CVE-2024-4177 June 6, 2024 Host whitelist parser issue in GravityZone Console On-Premise (VA-11554) Bitdefender GravityZone Console
1 2 3 … 10