Lucene search
+L

287 matches found

CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•23 views

AnyDesk 输入验证错误漏洞

AnyDesk is a remote desktop connection software from the German company AnyDesk. A security vulnerability exists in AnyDesk versions prior to 9.0.0 that stems from an integer overflow and heap buffer overflow in UDP packets when processing Identity user images in the Discovery feature or...

9.8CVSS7.1AI score0.00495EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/11/06 12:00 a.m.•7 views

CVE-2025-27916

An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is possible to manipulate the data and spoof the AnyDesk ID...

6.4AI score0.00294EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/06 12:00 a.m.•8 views

CVE-2025-27919

An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...

6.7AI score0.00295EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•29 views

PT-2025-45346

Name of the Vulnerable Software and Affected Versions AnyDesk versions prior to 9.0.0 Description An issue exists where an integer overflow can lead to a heap-based buffer overflow. This occurs through the processing of a UDP packet, specifically during the handling of an Identity user image with...

9.8CVSS7.1AI score0.00495EPSS
SaveExploits1References8
CVE
CVE
•added 2025/11/06 12:00 a.m.•38 views

CVE-2025-27916

CVE-2025-27916 affects AnyDesk for Windows (versions before 9.0.6) and AnyDesk for Android (before 8.0.0). The issue arises when a connection between two clients is established over an IP address, allowing manipulation of data and spoofing of the AnyDesk ID. Public documents describe the affected...

7.5CVSS6.4AI score0.00294EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•24 views

PT-2025-45347

Name of the Vulnerable Software and Affected Versions AnyDesk versions through 9.0.4 Description A remotely connected user with “Control my device” permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterpart...

8.5CVSS6.8AI score0.00295EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/11/06 12:00 a.m.•39 views

CVE-2025-27917

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory...

0.00471EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/06 12:00 a.m.•38 views

CVE-2025-27916

An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is possible to manipulate the data and spoof the AnyDesk ID...

0.00294EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•24 views

PT-2025-45345

Name of the Vulnerable Software and Affected Versions AnyDesk versions through 9.0.4 Description A remote denial of service can occur due to incorrect deserialization, leading to failed memory allocation and a NULL pointer dereference. Recommendations Update AnyDesk to a version later than 9.0.4...

7.8CVSS6.7AI score0.00471EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•2 views

CVE-2025-27916: Authentication Bypass by Spoofing

An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is possible to manipulate the data and spoof the AnyDesk ID...

7.5CVSS5.8AI score0.00294EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/06 12:00 a.m.•122 views

CVE-2025-27918

CVE-2025-27918 affects AnyDesk clients prior to the following platform versions: Windows < 9.0.5, macOS < 9.0.1, Linux < 7.0.0, iOS < 7.1.2, and Android

9.8CVSS6.6AI score0.00495EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•16 views

AnyDesk 安全漏洞

AnyDesk is a remote desktop connection software from AnyDesk, a German company. A security vulnerability exists in AnyDesk 9.0.4 and earlier versions, which originates from data that can be manipulated when a connection is established over an IP address, potentially resulting in AnyDesk ID spoofi...

7.5CVSS6.8AI score0.00294EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•21 views

AnyDesk 代码问题漏洞

AnyDesk is a remote desktop connection software from AnyDesk Germany. A security vulnerability exists in AnyDesk 9.0.4 and earlier versions, which stems from improper deserialization leading to memory allocation failure and null pointer dereferencing, which could lead to a remote denial of servic...

7.5CVSS6.7AI score0.00471EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•1 views

CVE-2025-27917: NULL Pointer Dereference

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory...

7.5CVSS5.6AI score0.00471EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•1 views

CVE-2025-27918: Integer Overflow or Wraparound

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...

9.8CVSS6AI score0.00495EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/06 12:00 a.m.•43 views

CVE-2025-27919

CVE-2025-27919 affects AnyDesk up to version 9.0.4. A remote user with the 'Control my device' permission can modify remote AnyDesk settings and create a password for the Full Access profile without counterparty confirmation, enabling later connections without confirmation. Impact per sources: co...

8.2CVSS6.7AI score0.00295EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•17 views

PT-2025-45344

Name of the Vulnerable Software and Affected Versions AnyDesk versions through 9.0.4 Description An issue exists in AnyDesk where, when a connection is established between two clients using an IP address, data manipulation is possible, leading to spoofing of the AnyDesk ID. Recommendations Update...

7.8CVSS6.5AI score0.00294EPSS
SaveExploits1References7
GithubExploit
GithubExploit
•added 2025/10/21 7:31 p.m.•333 views

Exploit for CVE-2025-12654

AnyDesk Exploit AnyDesk, remote access software, has faced se...

9.8CVSS7.8AI score0.80551EPSS
SaveExploits10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•30 views

EUVD-2020-20121

Malware in sbrugna...

7.8CVSS7.6AI score0.00353EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2018-5051

Malware in sbrugna...

7.8CVSS7.7AI score0.01125EPSS
SaveExploits0References2
Rows per page
Query Builder