Todesktop - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2026-01-23.

Products

• Builder - 3 CVEs
• Todesktop - 1 CVEs

Newest CVEs of Todesktop

• CVE-2025-67231 - CVSS 5.9 (medium), 2026-01-23: A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context of a user's…
• CVE-2025-67230 - CVSS 7.1 (high), 2026-01-23: Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external…
• CVE-2025-67229 - CVSS 9.8 (critical), 2026-01-23: An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof…
• CVE-2025-27554 - CVSS 9.9 (critical), 2025-03-01: ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to execute arbitrary commands on the build…