Zulip Zulip Desktop
2 CVEs affecting Zulip Zulip Desktop. Latest disclosed: 2021-02-05. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-10857 | Critical | 9.8 | 2021-02-05 | Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution. |
CVE-2020-10858 | Medium | 5.3 | 2021-02-05 | Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler. |