B

Bytedance

China Commercial www.bytedance.com ↗ Bug Bounty ↗
C
CAUTION
5
Total CVEs
1
Crit / High
2
Medium
33%
Unpatched
33%
Patched
5.6
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
33%
Unpatched
33%
Under Review
33%
✓ 1 patched ✗ 1 unpatched ~ 1 under review
▸ Intelligence by Audience
PoC Available
1 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"bytedance" port:443
org:"Bytedance" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-34430 0.80% exploitation probability
CVE-2026-96680 0.26% exploitation probability
CVE-2026-32859 0.20% exploitation probability
🎯 Bug Bounty Program: https://hackerone.com/byte
Quick Facts for Reporting
Total CVEs tracked
5
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
33%
Avg CVSS score
5.6
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-21
Security Risk Score (for investors)
LOW
Vuln Volume
AVG
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
National Security and the TikTok Ban - American University
American University 2025-01-23
Does Trump Kind of Have a Point About TikTok? - Slate
Slate 2020-08-03
A security flaw in China's TikTok app was found. It lets hackers use text messages to control accounts - CNBC
CNBC 2020-01-09
Managing the Risks of China’s Access to U.S. Data and Control of Software and Connected Technology - Carnegie Endowment for International Peace
Carnegie Endowment for International Peace 2025-01-30
Maryland is the latest state to ban TikTok in government agencies - WBUR
WBUR 2022-12-07
TikTok Vulnerability Let Hackers to Hijack any Video Content - GBHackers News
GBHackers News 2020-04-14
▸ Recent CVEs showing 20 of 3
CVE IDSeverityPatchEPSSDate
CVE-2026-96680 PoC 4.3 MEDIUM UNKNOWN / UNPATCHED 0.26% 2026-09-23
CVE-2026-34430 8.6 HIGH PATCH UNDER REVIEW 0.80% 2026-04-01
CVE-2026-32859 5.1 MEDIUM PATCHED / FIX AVAILABLE 0.20% 2026-03-27
View all 3 CVEs for Bytedance →
▸Intel
HQBeijing, China
Founded2012
Employees150,000
CEOLiang Rubo
CountryChina
LicenseCommercial
Bug BountyView Program ↗
Trust ScoreC — CAUTION
Max CVSS7.1
Last Updated2026-07-21
▸Top Weaknesses
CWE-264
Unknown Weakness Type
1 occurrence in Bytedance CVEs (20% of total)
CWE-264 ⓘ
1
CWE-79
Cross-Site Scripting (XSS)
1 occurrence in Bytedance CVEs (20% of total)
CWE-79 ⓘ
1
CWE-404
Unknown Weakness Type
1 occurrence in Bytedance CVEs (20% of total)
CWE-404 ⓘ
1
CWE-22
Unknown Weakness Type
1 occurrence in Bytedance CVEs (20% of total)
CWE-22 ⓘ
1
CWE-74
Unknown Weakness Type
1 occurrence in Bytedance CVEs (20% of total)
CWE-74 ⓘ
1
▸Company Profile

ByteDance is a Chinese multinational internet technology company known for developing content platforms like TikTok (Douyin in China) and the news aggregator Toutiao. Its products have significant cybersecurity relevance due to their massive user bases, data collection practices, and scrutiny over data privacy and national security concerns.

▸Response Metrics
Est. MTTR ⓘ ~167 days (Poor)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Patch Speed ⓘ Poor (>65% open)
33% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M

Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Bytedance C valtersit.com