CVE-2025-44964: Bluestacks

Low severity, CVSS 3.9. EPSS: 0.1% chance of exploitation in the next 30 days.

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information.

Affected products

• Bluestacks Bluestacks: version 5.20 only

Published 2025-08-05. Last modified 2026-07-05.