Utorrent

This hub aggregates every CVE we track for Utorrent, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Utorrent.

• CVE-2018-25044uTorrent Guest Account privileges management6.3Jun 17, 2022
• CVE-2018-25043uTorrent PRNG improper authentication5.0Jun 17, 2022
• CVE-2018-25042uTorrent memory corruption5.0Jun 17, 2022
• CVE-2018-25041uTorrent JSON RPC Server privileges management6.3Jun 17, 2022
• CVE-2020-8437The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service.7.5Mar 2, 2020
• CVE-2015-5474BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.9.3Aug 13, 2015
• CVE-2009-5134Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions before 1.8.3 (Build 16010), allows user-assisted remote attackers to cause a ...6.8Jan 18, 2013
• CVE-2010-3129Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse p...9.3Aug 26, 2010
• CVE-2008-7166Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumpt...5.0Sep 4, 2009
• CVE-2008-4434Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly ex...9.3Oct 3, 2008
• CVE-2008-0071The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP reque...4.3Jun 16, 2008
• CVE-2008-0364Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier in the 1.8.x series; on Windows allows remote attackers to cause a denial of se...5.0Jan 18, 2008
• CVE-2007-0927Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce header.7.5Feb 14, 2007