Bluestacks

8 CVEs across 5 Bluestacks products. Browse Bluestacks vulnerabilities, severities, and proof-of-concept exploits.

Bluestacks products with known CVEs

ProductCVEs
Bluestacks6
App Player1
Blue Stacks App Player1
Bluestacks App Player1
Bluestacks App Player1
Bluestacks CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-25548Medium6.22026-03-21BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the sea…
CVE-2019-25293High7.82026-02-06BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service that allows local attackers to potentially…
CVE-2025-44964Low3.92025-08-05A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive information.
CVE-2020-24367High7.82020-11-10Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that is later executed by…
CVE-2019-14220Medium6.52019-09-24An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows. BlueStacks employs Android running in a virtual machine (VM)…
CVE-2019-12936High7.12019-06-23BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions.
CVE-2018-0701High8.82018-11-15BlueStacks App Player (BlueStacks App Player for Windows 3.0.0 to 4.31.55, BlueStacks App Player for macOS 2.0.0 and later) allows an attacker on the same netw…
CVE-2016-4288High8.42017-01-06A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions th…