Vulnerabilities

TI-2026-13193 CVE-2026-15681 · GHSA-fxcj-7h34-wrrr

Link following in AnyDesk

LOW 24

AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00141 Published 2026-07-13 No fix listed CWE-59

TI-2026-13194 CVE-2026-15682 · GHSA-f5mf-mx82-hm83

Link following in AnyDesk

LOW 24

AnyDesk Support Information Link Following Denial-of-Service Vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00141 Published 2026-07-13 No fix listed CWE-59

TI-2016-09270 CVE-2016-20094 · GHSA-3364-g3c8-w87q

AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege

HIGH 72

AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00197 Published 2026-06-19 No fix listed CWE-428

TI-2019-15315 CVE-2019-25261 · GHSA-5ch6-f4pq-q5vf

AnyDesk 5.4.0 - Unquoted Service Path

HIGH 72

AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially inject malicious executables.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00195 Published 2026-02-03 No fix listed CWE-428

TI-2025-20643 CVE-2025-27919 · GHSA-g2cq-q859-8fm9

An issue was discovered in AnyDesk through 9.0.4.

LOW 35

An issue was discovered in AnyDesk through 9.0.4.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00316 Published 2025-11-06 No fix listed CWE-284

TI-2025-20642 CVE-2025-27918 · GHSA-xfj8-gxhp-pgmr

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before…

MEDIUM 43

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00699 Published 2025-11-06 No fix listed CWE-190

TI-2025-20641 CVE-2025-27917 · GHSA-3ghq-53cj-qqmp

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before…

HIGH 72

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00505 Published 2025-11-06 No fix listed CWE-476

TI-2025-20640 CVE-2025-27916 · GHSA-q872-6vf4-qmmw

An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android…

HIGH 72

An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00316 Published 2025-11-06 No fix listed CWE-290

TI-2024-11825 CVE-2024-12754 · GHSA-rqf6-6p8f-f2pv

Link following in AnyDesk

LOW 27

AnyDesk Link Following Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01181 Published 2024-12-30 No fix listed CWE-59

TI-2023-11646 CVE-2023-26509 · GHSA-qhhg-f5q2-j9gj

AnyDesk 7.0.8 allows remote Denial of Service.

MEDIUM 41

AnyDesk 7.0.8 allows remote Denial of Service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01117 Published 2023-07-03 No fix listed CWE-400

TI-2021-20039 CVE-2021-44425 · GHSA-rgr5-hjh7-p6gp

An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.3.

LOW 30

An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.3.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00594 Published 2022-09-12 No fix listed

TI-2021-20040 CVE-2021-44426 · GHSA-2r63-v4pm-8j7g

An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5.

MEDIUM 40

An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01182 Published 2022-09-12 No fix listed CWE-434

TI-2022-14106 CVE-2022-32450 · GHSA-32r7-mgwg-67wq

AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because…

LOW 32

AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own %APPDATA% folder (used for ad.trace and chat) but the product runs as SYSTEM when writing chat-room…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00538 Published 2022-07-18 No fix listed CWE-59

TI-2021-17777 CVE-2021-40854 · GHSA-q7c6-26j2-f5r8

AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator…

LOW 33

AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator privileges by using the Open Chat Log feature to launch a privileged Notepad process that can launch other applications.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00204 Published 2021-10-14 No fix listed CWE-269

TI-2020-18009 CVE-2020-35483 · GHSA-xv56-v69h-6cw4

AnyDesk before 6.1.0 on Windows, when run in portable mode on a system where the attacker…

LOW 35

AnyDesk before 6.1.0 on Windows, when run in portable mode on a system where the attacker has write access to the application directory, allows this attacker to compromise a local user account via a read-only setting for…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00473 Published 2021-01-11 No fix listed CWE-427

TI-2020-16731 CVE-2020-27614 · GHSA-f534-wv46-r4jg

AnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that…

LOW 34

AnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that does not properly validate client requests and allows local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00353 Published 2020-12-09 No fix listed CWE-20

TI-2020-10342 CVE-2020-13160 · GHSA-5hwp-hcwg-rrjp

AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be…

HIGH 82

AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.80684 Published 2020-06-09 No fix listed CWE-134

TI-2018-09409 CVE-2018-13102 · GHSA-v5pq-xgr5-97vp

AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability.

LOW 36

AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01125 Published 2018-07-03 No fix listed CWE-426

TI-2017-10504 CVE-2017-14397 · GHSA-8m7p-h94g-jp2r

AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.

MEDIUM 45

AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01542 Published 2017-09-12 No fix listed CWE-74

Vulnerabilities

Filters