CyberSecBulletin

Bandisoft vulnerabilities

We track 2 vulnerabilities in Bandisoft products across 2 products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on April 15, 2025.

2vulnerabilities
0critical
2high
1exploited
8.3average CVSS score

Latest Bandisoft vulnerabilities

  • 7.8 High severity

    Bandizip: Inclusion of Functionality from Untrusted Control Sphere

    CVE-2025-33027Bandisoft

    In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Bandizip. User interaction is required to exploit this vuln

  • 8.8 High severity

    Google Chromium WebP Heap-Based Buffer Overflow Exploited

    CVE-2023-4863GoogleEPSS 100%

    Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)