b
bandisoft
Security Risk Profile
23
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 14, 2014 to present
12
Total CVEs
6
Critical+High
1
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
7.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
23/100
low
⚠️ 1 Active Exploits⚡ 1 Zero-Days🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
1High
5Medium
6Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
4
2
Input Validation
1
3
Path Traversal
1
4
Integer Overflow
1
Most Affected Products
1. Bandisoft Bandizip13
2. Bandisoft BandiView8
3. Mozilla Firefox5
4. npm/electron5
5. Mozilla Firefox ESR4
Recent Vulnerabilities
See more →CVE-2026-113609
CVSS 4.8medium
Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts
Oct 20, 2026🔧 No Patch
CVE-2025-33027
CVSS 7.8EPSS 0%high
Apr 15, 2025🔧 No Patch
CVE-2024-45870
CVSS 6.5medium
Oct 3, 2024🔧 No Patch
CVE-2024-45872
CVSS 6.3medium
Oct 3, 2024🔧 No Patch
CVE-2024-45871
CVSS 6.3medium
Oct 3, 2024🔧 No Patch
CVE-2024-22526
CVSS 5.5medium
Apr 12, 2024🔧 No Patch
CVE-2023-4863
CVSS 8.8high
Heap buffer overflow in WebP
Sep 6, 2023⚠ Exploited⚡ Zero-Day
CVE-2021-26635
CVSS 7.8high
Bandisoft ARK Library buffer overflow vulnerability
Jun 1, 2022🔧 No Patch
CVE-2021-26623
CVSS 9.8critical
Bandisoft ARK Library Out-of-bound Vulnerability
Apr 1, 2022🔧 No Patch
CVE-2021-26615
CVSS 8.8high
bandisoft ARK library integer overflow vulnerability
Nov 26, 2021🔧 No Patch
Monitor bandisoft in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.