Approved changes feed: RSS · Atom
cpe:2.3:a:anydesk:anydesk:*:*:*:*:*:windows:*:*
part: a version: * update: *
| Vendor | Anydesk (6daecd47-e593-50ac-b7a3-68970cb69a05) |
|---|---|
| Product | Anydesk (27961aa1-c595-5070-bade-89960e11a68f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | windows |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27919 |
vulnerable | 2026-06-08 07:14:55.881522 |
Details available
An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later connect without this counterparty confirmation.
Published: 2025-11-06T00:00:00.000Z
Updated: 2025-11-12T17:01:50.836Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27918 |
vulnerable | 2026-06-08 07:14:55.881257 |
Details available
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing of an Identity user image within the Discovery feature, or when establishing a connection between any two clients.
Published: 2025-11-06T00:00:00.000Z
Updated: 2025-12-08T16:43:33.236Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27917 |
vulnerable | 2026-06-08 07:14:55.880978 |
Details available
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory allocation and a NULL pointer dereference.
Published: 2025-11-06T00:00:00.000Z
Updated: 2025-12-08T16:45:57.331Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27916 |
vulnerable | 2026-06-08 07:14:55.880617 |
Details available
An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is possible to manipulate the data and spoof the AnyDesk ID.
Published: 2025-11-06T00:00:00.000Z
Updated: 2025-12-08T16:39:18.008Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44426 |
vulnerable | 2026-06-08 05:36:45.760576 |
Details available
An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local ~/Downloads/ directory is possible if the victim is using the AnyDesk Windows client to connect to a remote machine, if an attacker is also connected remotely with AnyDesk to the same remote machine. The upload is done without any approval or action taken by the victim.
Published: 2022-09-12T20:47:33.000Z
Updated: 2024-08-04T04:25:16.512Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44425 |
vulnerable | 2026-06-08 05:36:45.760041 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40854 |
vulnerable | 2026-06-08 05:35:19.177682 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35483 |
vulnerable | 2026-06-08 05:25:01.143147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.