BlueStacks records
7 published records for vendor bluestacks.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-269 Improper Privilege Management1
- CWE-275 Permission Issues1
- CWE-295 Improper Certificate Validation1
- CWE-466 Return of Pointer Value Outside of Expected Range1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2018-0701No exploit | BlueStacks App Player (BlueStacks App Player for Windows 3.0.0 to 4.31.55, BlueStacks App Player for macOS 2.0.0 and later) allows an attackbluestacks · bluestacks | High8.8 | — | 0.5% | Nov 15, 2018 |
33Monitor | CVE-2019-12936No exploit | BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions.bluestacks · bluestacks app player · CWE-20 | High8.0 | — | 3.4% | Jun 23, 2019 |
33Monitor | CVE-2016-4288No exploit | A local privilege escalation vulnerability exists in BlueStacks App Player.bluestacks · bluestacks · CWE-275 | High8.4 | — | 0.6% | Jan 6, 2017 |
31Monitor | CVE-2020-24367No exploit | Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that ibluestacks · bluestacks · CWE-732 | High7.8 | — | 0.3% | Nov 10, 2020 |
27Monitor | CVE-2019-25548No exploit | BlueStacks 4.80.0.1060 Denial of Service via Search Fieldbluestacks · bluestacks · CWE-466 | Medium6.9 | — | 0.1% | Mar 21, 2026 |
26Monitor | CVE-2019-14220Proof of concept | An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows.bluestacks · bluestacks · CWE-269 | Medium6.5 | — | 0.9% | Sep 24, 2019 |
15Monitor | CVE-2025-44964No exploit | A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive informabluestacks · bluestacks · CWE-295 | Low3.9 | — | 0.1% | Aug 5, 2025 |
- CVE-2018-070135Monitor
BlueStacks App Player (BlueStacks App Player for Windows 3.0.0 to 4.31.55, BlueStacks App Player for macOS 2.0.0 and later) allows an attack
HighCVSS 8.8No exploitEPSS 0%bluestacks · bluestacksNov 15, 2018
- CVE-2019-1293633Monitor
BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions.
HighCVSS 8.0No exploitEPSS 3%bluestacks · bluestacks app playerJun 23, 2019
- CVE-2016-428833Monitor
A local privilege escalation vulnerability exists in BlueStacks App Player.
HighCVSS 8.4No exploitEPSS 0%bluestacks · bluestacksJan 6, 2017
- CVE-2020-2436731Monitor
Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that i
HighCVSS 7.8No exploitEPSS 0%bluestacks · bluestacksNov 10, 2020
- CVE-2019-2554827Monitor
BlueStacks 4.80.0.1060 Denial of Service via Search Field
MediumCVSS 6.9No exploitEPSS 0%bluestacks · bluestacksMar 21, 2026
- CVE-2019-1422026Monitor
An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows.
MediumCVSS 6.5Proof of conceptEPSS 0%bluestacks · bluestacksSep 24, 2019
- CVE-2025-4496415Monitor
A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive informa
LowCVSS 3.9No exploitEPSS 0%bluestacks · bluestacksAug 5, 2025