PatchTheCVEbandisoft vulnerabilities
Recent CVEs affecting bandisoft products. 4 tracked.
bandisoft has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-04-15. Highest priority: CVE-2024-45870 (score 38/100).
- CVE-2025-33027 MEDIUM 6.1 UPGRADE In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability
- CVE-2024-45872 MEDIUM 6.3 DOWNGRADE Bandisoft BandiView 7.05 is vulnerable to Buffer Overflow via sub_0x410d1d
- CVE-2024-45871 MEDIUM 6.3 DOWNGRADE Bandisoft BandiView 7.05 is Incorrect Access Control via sub_0x232bd8 resulting in denial of service (DOS).
- CVE-2024-45870 MEDIUM 6.5 DOWNGRADE Bandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub_0x3d80fc via a crafted POC file.
FAQ
How do I fix bandisoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bandisoft being exploited right now?
None of the tracked bandisoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bandisoft CVE should I patch first?
CVE-2024-45870 currently ranks highest (38/100): Bandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub_0x3d80fc via a crafted POC file..