What’s Vulnerable › Vulnerabilities

CVE-2018-17061

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-09-15 · updated 2026-06-17
• Weakness: CWE-79

Description

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results.

Affected products

• Bullguard Safe Browsing: before 18.1.355.9 — fixed in 18.1.355.9

How to fix

Upgrade to a fixed version: Bullguard Safe Browsing 18.1.355.9. Check the vendor advisory for mitigations.

References

• https://medium.com/%40Mthirup/hacking-your-own-antivirus-for-fun-and-profit-safe-browsing-gone-wrong-365db9d1d3f7
• https://www.bullguard.com/about/release-notes
• https://medium.com/%40Mthirup/hacking-your-own-antivirus-for-fun-and-profit-safe-browsing-gone-wrong-365db9d1d3f7
• https://www.bullguard.com/about/release-notes

Get alerted when CVE-2018-17061 or the next vulnerability affects your stack