blizzard CVE Vulnerabilities & Metrics

Focus on blizzard vulnerabilities and metrics.

Last updated: 07 Jun 2025, 22:25 UTC

About blizzard Security Exposure

This page consolidates all known Common Vulnerabilities and Exposures (CVEs) associated with blizzard. We track both calendar-based metrics (using fixed periods) and rolling metrics (using gliding windows) to give you a comprehensive view of security trends and risk evolution. Use these insights to assess risk and plan your patching strategy.

For a broader perspective on cybersecurity threats, explore the comprehensive list of CVEs by vendor and product. Stay updated on critical vulnerabilities affecting major software and hardware providers.

Global CVE Overview

Total blizzard CVEs: 3
Earliest CVE date: 20 Apr 2010, 14:30 UTC
Latest CVE date: 21 May 2025, 16:15 UTC

Latest CVE reference: CVE-2025-27997

Rolling Stats

30-day Count (Rolling): 1
365-day Count (Rolling): 1

Calendar-based Variation

Calendar-based Variation compares a fixed calendar period (e.g., this month versus the same month last year), while Rolling Growth Rate uses a continuous window (e.g., last 30 days versus the previous 30 days) to capture trends independent of calendar boundaries.

Variations & Growth

Month Variation (Calendar): 0%
Year Variation (Calendar): 0%

Month Growth Rate (30-day Rolling): 0.0%
Year Growth Rate (365-day Rolling): 0.0%

Monthly CVE Trends (current vs previous Year)

Annual CVE Trends (Last 20 Years)

Critical blizzard CVEs (CVSS ≥ 9) Over 20 Years

CVSS Stats

Average CVSS: 4.35

Max CVSS: 9.3

Critical CVEs (≥9): 1

CVSS Range vs. Count

Range Count
0.0-3.9 2
4.0-6.9 1
7.0-8.9 0
9.0-10.0 1

CVSS Distribution Chart

Top 5 Highest CVSS blizzard CVEs

These are the five CVEs with the highest CVSS scores for blizzard, sorted by severity first and recency.

All CVEs for blizzard

CVE-2025-27997 blizzard vulnerability CVSS: 0 21 May 2025, 16:15 UTC

An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.

CVE-2020-27383 blizzard vulnerability CVSS: 4.6 09 Jun 2021, 19:15 UTC

Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the existing executable file with a binary of his choice. The vulnerability exist due to weak set of permissions being granted to the "Authenticated Users Group" which grants the (F) Flag aka "Full Control"

CVE-2017-14748 blizzard vulnerability CVSS: 3.5 26 Sep 2017, 17:29 UTC

Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by leaving a competitive match at a specific time during the initial loading of that match.

CVE-2009-4768 blizzard vulnerability CVSS: 9.3 20 Apr 2010, 14:30 UTC

Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted custom map. NOTE: some of these details are obtained from third party information.