CVE-2025-67230

ToDesktop Builder version 0.33.0 is vulnerable to a flaw in its Custom URL Scheme handler . Due to insufficient validation, attackers who gain renderer-context access can invoke external protocol handlers, potentially compromising the system. Remediation involves updating to a newer version that ...

CVE-2025-67231

ToDesktop Builder v0.33.1 is affected by a reflected cross-site scripting (XSS) vulnerability. This flaw allows an attacker to execute arbitrary code within a user's browser session by delivering a specially crafted payload . The vulnerability arises from the improper neutralization of input duri...

CVE-2025-67229

ToDesktop Builder version 0.32.1 is susceptible to an improper certificate validation vulnerability. Due to insufficient certificate verification, an unauthenticated, on-path attacker can spoof backend responses. While exploitation details and specific exploit links are not provided, the vulnerab...