Approved changes feed: RSS · Atom

cpe:2.3:a:anydesk:anydesk:8.0.9:*:*:*:*:windows:*:*

part: a version: 8.0.9 update: *

VendorAnydesk (6daecd47-e593-50ac-b7a3-68970cb69a05)
ProductAnydesk (27961aa1-c595-5070-bade-89960e11a68f)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12754 vulnerable 2026-06-08 06:25:36.036409 AnyDesk Link Following Information Disclosure Vulnerability
MEDIUM (5.5)
AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of background images. By creating a junction, an attacker can abuse the service to read arbitrary files. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-23940.
Published: 2024-12-30T16:51:19.468Z
Updated: 2024-12-31T19:09:11.684Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.