CVE-2018-8955: Bitdefender Gravityzone

Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days.

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitrary code by changing the filename while leaving the file's digital signature unchanged.

Affected products

• Bitdefender Gravityzone: affected versions not specified

Published 2018-10-24. Last modified 2026-06-17.