Bitdefender Napoca vulnerabilities

2 CVEs affecting Bitdefender Napoca, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-10047, published 2026-06-02.

More from Bitdefender.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-10047, published 2026-06-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook handler, implemented in napoca/kernel/handler.c. The handler uses a guest-controlled…
• CVE-2026-10046, published 2026-06-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in napoca/guests/bios_handlers.c. The handler…