Malicious code in armageddon-client-desktop (npm)

The package armageddon-client-desktop was found to contain malicious code...

Malicious code in desktop-footer (npm)

The package desktop-footer was found to contain malicious code...

Malicious code in threema-desktop (npm)

The package threema-desktop was found to contain malicious code...

MAL-2025-29207 Malicious code in pia-desktop-scripts (npm)

The package pia-desktop-scripts was found to contain malicious code...

MAL-2025-8075 Malicious code in @ice-desktop/hub (npm)

The package @ice-desktop/hub was found to contain malicious code...

Malicious code in desktop-music-app (npm)

The package desktop-music-app was found to contain malicious code...

MAL-2025-36840 Malicious code in threema-desktop (npm)

The package threema-desktop was found to contain malicious code...

Malicious code in pia-desktop-scripts (npm)

The package pia-desktop-scripts was found to contain malicious code...

MAL-2025-14834 Malicious code in armageddon-client-desktop (npm)

The package armageddon-client-desktop was found to contain malicious code...

MAL-2025-18329 Malicious code in desktop-music-app (npm)

The package desktop-music-app was found to contain malicious code...

MAL-2025-8076 Malicious code in @ice-desktop/uikit-whitelabel (npm)

The package @ice-desktop/uikit-whitelabel was found to contain malicious code...

MAL-2025-18328 Malicious code in desktop-footer (npm)

The package desktop-footer was found to contain malicious code...

CVE-2025-50153

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-50171

Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-53152

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...

CVE-2025-53722

Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network...

CVE-2025-54063

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or embedding a specially crafted URL on a...

CVE-2025-54382 Cherry Studio RCE Vulnerability Disclosure

Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution RCE vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirecti...

Vulnerability fixed in Adobe Photoshop

Adobe has fixed a vulnerability in Photoshop Desktop Versions 12.3, 8 and earlier. The vulnerability is in how Photoshop Desktop handles opening maliciously crafted files. This vulnerability allows attackers to execute arbitrary code within the application. Adobe has released updates to fix the...

Brave Desktop 1.81.135 Security Fixes

Set clipboard sensitivity flag when copying Brave Wallet recovery code as reported on HackerOne by newfunction. Upgraded Chromium to 139.0.7258.127 — refer to Google Chrome advisories for inherited CVEs...