Anydesk

5 CVEs across 1 Anydesk products. Browse Anydesk vulnerabilities, severities, and proof-of-concept exploits.

Anydesk products with known CVEs

ProductCVEs
Anydesk20
Anydesk CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15682Medium5.52026-07-13AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition o…
CVE-2026-15681Medium5.52026-07-13AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on a…
CVE-2016-20094High7.82026-06-19AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the servic…
CVE-2019-25261High7.82026-02-03AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially inject malicious…
CVE-2025-344992025-12-11AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTE…
CVE-2025-27919High8.22025-11-06An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and…
CVE-2025-27918Critical9.82025-11-06An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and…
CVE-2025-27917High7.52025-11-06An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and…
CVE-2025-27916High7.52025-11-06An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an…
CVE-2024-12754Medium5.52024-12-30AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installati…
CVE-2023-26509High7.52023-07-03AnyDesk 7.0.8 allows remote Denial of Service.
CVE-2021-44426High8.82022-09-12An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local ~/Downloads/ directory is possible i…
CVE-2021-44425Medium6.52022-09-12An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.3. An unnecessarily open listening port on a machine in the LAN of an attacker, opened by…
CVE-2022-32450High7.12022-07-18AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own %APPDATA% folder (used for ad.trace and…
CVE-2021-40854High7.82021-10-14AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator privileges by using the Open Chat Log feature to launch a privileged No…
CVE-2020-35483High7.82021-01-11AnyDesk before 6.1.0 on Windows, when run in portable mode on a system where the attacker has write access to the application directory, allows this attacker t…
CVE-2020-27614High7.82020-12-09AnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that does not properly validate client requests and allows local privilege…
CVE-2020-13160Critical9.82020-06-09AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.
CVE-2018-13102High7.82018-07-03AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability.
CVE-2017-14397Critical9.82017-09-12AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.