CVE Intelligence

Todesktop vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Todesktop products: 3 record(s), with severity, exploitation and fixes.

Builder 3

Exploited only (KEV) →

CVE-2025-67231 Medium · 5.9 CWE-79 Jan 23, 2026
Cross-site Scripting (XSS) in Todesktop Builder
A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.
CVE-2025-67230 High · 7.1 CWE-276 Jan 23, 2026
Incorrect Default Permissions in Todesktop Builder
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation.
CVE-2025-67229 Critical · 9.8 CWE-295 Jan 23, 2026
Improper Certificate Validation in Todesktop Builder
An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by exploiting insufficient certificate validation.