Bilibili Desktop vulnerabilities
1 known vulnerability in Bilibili Desktop from Bilibili. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.0average CVSS score
Latest first
- 8.0 High severity
Bilibili Desktop: Improper Certificate Validation
Bilibili Desktop through 1.18.0 disables TLS certificate verification process-wide and executes unsigned remote JavaScript configuration without integrity checks. An attacker in an on-path network position can intercept configuration fetches, inject arbitrary