31 matches found
CVE-2025-1398
Mattermost Desktop App (Mac) versions
CVE-2024-37182
Mattermost Desktop App prior to 5.8.0 is affected (versions
CVE-2024-36287
Mattermost Desktop App versions ≤ 5.7.0 fail to disable certain Electron debug flags, enabling bypass of macOS TCC restrictions. Root cause: improper handling of Electron flags in the app. Overviews from multiple sources corroborate the issue (CVE-2024-36287). The documents do not provide specifi...
CVE-2024-39613
Mattermost Desktop App versions
CVE-2023-5920
Mattermost Desktop for MacOS is reported to fail to utilize macOS’s secure keyboard input, allowing other processes to read keyboard input. Affected component: Mattermost Desktop for MacOS; underlying issue is failure to activate secure keyboard entry. Documented impact is local access by other p...
CVE-2023-5876
Mattermost security issue CVE-2023-5876: a RegExp built from the server URL path is not properly validated, allowing a malicious server-enrolled attacker to cause a Denial of Service. Descriptions across sources attribute this to Mattermost and note vulnerability affects Mattermost versions up to...
CVE-2023-2000
CVE-2023-2000 affects Mattermost Desktop App. The issue is an unvalidated mattermost server redirect, enabling navigation to an arbitrary website. Documents consistently describe the vulnerability as related to server redirects not being properly authenticated/validated, leading to potential unre...
CVE-2026-1046
Mattermost Desktop App versions
CVE-2024-45835
Mattermost Desktop App
CVE-2019-20856
CVE-2019-20856 affects Mattermost Desktop App on macOS prior to 4.3.0. The connected documents describe a vulnerability that enables dylib injection , but do not provide concrete details about the root cause beyond that description. The impact is described as the ability to inject dynamic librari...
CVE-2023-5875
CVE-2023-5875 affects Mattermost Desktop (prior to version 5.5.0 per CNNVD) due to improper handling of permissions or lack of user consent prompts for sensitive permissions, enabling media exposure stemming from a malicious Mattermost server. The connected sources consistently describe the issue...
CVE-2023-5339
Mattermost Desktop is affected by CVE-2023-5339: during initial run after a fresh install, it fails to set the correct log level, causing logging of keystrokes including password entry. The issue is described across multiple sources as a logging information disclosure vulnerability in Mattermost ...
CVE-2020-14454
Mattermost Desktop App vulnerability CVE-2020-14454 affects versions prior to 4.4.0. Root cause: improper handling of server redirects, enabling an attacker to open web pages within the desktop app via mishandled redirection (MMSA-2020-0008). Impact details in sources indicate the issue could rel...
CVE-2026-1628
Mattermost Desktop App versions
CVE-2019-20861
The vulnerability CVE-2019-20861 affects Mattermost Desktop App prior to 4.2.2. A crafted link can allow an attacker to execute arbitrary code. The provided documents confirm the affected product/version and the high-level impact but do not include details on root cause, specific vulnerable compo...
CVE-2020-14456
Mattermost Desktop App
CVE-2024-39772
Summary: CVE-2024-39772 affects Mattermost Desktop App versions
CVE-2018-21265
Mattermost Desktop App before 4.0.0 is affected by a vulnerability caused by mishandling the Same Origin Policy for setPermissionRequestHandler (affecting video, audio, and notifications). The issue is described across multiple sources (CVE-2018-21265) and is corroborated in Red Hat and CNVD entr...
CVE-2026-4643
Mattermost Desktop App versions ≤ 6.1, 6.0.1, and 5.4.13.0 are affected by a flaw where server-rendered content can invoke window.close() in the renderer context, causing the underlying application view to close and yielding a client‑level denial of service. Root cause: the app fails to prevent s...
CVE-2020-14455
Technical details beyond the provided description are not publicly available in the supplied documents. Monitor for updates.
CVE-2016-11064
Mattermost Desktop App fixed for CVE-2016-11064. Before 3.4.0, it is vulnerable to code execution via injection where strings could be executed as code. Affected component: Mattermost Desktop App. Root cause: injection allowing code execution through untrusted input during code segment constructi...
CVE-2026-6517
Mattermost Desktop App (versions
CVE-2026-8075
CVE-2026-8075 concerns the Mattermost Desktop App. The connected details specify that versions
CVE-2026-8683
Mattermost Desktop App
CVE-2026-3471
Mattermost Desktop App shows a vulnerability in versions ≤6.1, 6.0.1, 5.4.13.0 where it does not sanitize an invalid URL in a pop‑up window, enabling a malicious server to repeatedly crash the application via window.open('javascript:alert()'). Root cause: improper handling of URLs in pop‑ups. Imp...
CVE-2026-75587
Mattermost Desktop App versions
CVE-2026-9602
Mattermost Desktop App vulnerable versions:
CVE-2025-58084
Mattermost Desktop App up to version 5.13.0 is affected. The issue is due to improper validation of URLs external to configured Mattermost servers, allowing a malicious server to crash the user’s application by sending a malformed external URL. Affected product: Mattermost Desktop App (versions
CVE-2025-13326
CVE-2025-13326 affects Mattermost Desktop App on macOS versions prior to 6.0.0, failing to enable the Hardened Runtime in Mac App Store builds. This allows an attacker to inherit TCC permissions by copying the binary to a temporary folder. Affected component is the Mattermost Desktop App binary; ...
CVE-2025-13321
CVE-2025-13321 affects Mattermost Desktop App versions prior to 6.0.0. The vulnerability stems from failure to sanitize sensitive information in application logs and to purge data on server deletion, enabling an attacker with local access to read potentially sensitive information from logs. Evide...