Skip to content
OpenAdvisories

Vendor

Bilibili

1 known vulnerabilities.

Products

Bilibili Desktop 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2026-86185

    Bilibili Desktop through 1.18.0 Remote Code Execution via TLS Verification Bypass

    Bilibili Desktop through 1.18.0 disables TLS certificate verification process-wide and executes unsigned remote JavaScript configuration without integrity checks. An attacker in an on-path network position can intercept configuration fetches, inject arbitrary…

    Bilibili Bilibili Desktop