paragon backup \& recovery vulnerabilities and fixes

Recent CVEs affecting paragon backup \& recovery, with upgrade or downgrade steps. 5 tracked.

Also searched as: paragonbackup\&recovery.

paragon backup \& recovery has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-03-03. Highest priority: CVE-2025-0288 (score 38/100).

• CVE-2025-0289 HIGH 7.8 UPGRADE UPGRADE Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the
• CVE-2025-0288 HIGH 7.8 UPGRADE UPGRADE Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facili
• CVE-2025-0287 MEDIUM 5.1 UPGRADE UPGRADE Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is
• CVE-2025-0286 HIGH 8.4 UPGRADE UPGRADE Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys t
• CVE-2025-0285 HIGH 7.8 UPGRADE UPGRADE Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys

FAQ

How do I fix paragon backup \& recovery vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is paragon backup \& recovery being exploited right now?

None of the tracked paragon backup \& recovery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which paragon backup \& recovery CVE should I patch first?

CVE-2025-0288 currently ranks highest (38/100): Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facili.

RSS feed for paragon backup \& recovery · ← Back to latest CVEs