MD
Product
Mattermost Desktop
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 19Low 9
Watch
Add Mattermost Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-13326 | 3.9 | Dec 17 | Mattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App Store Affected: before 6.0.0 |
| CVE-2026-12284 | 3.7 | Sep 17 | Mattermost Desktop App Missing IPC Sender Validation in Calls Leave Handler Affected: 6.2.0 before 6.2.3 |
| CVE-2026-4643 | 3.5 | May 18 | Calling window.close() from server-side content causes crash in the Mattermost Desktop App Affected: through 5.4.13.0; 6.0.0 through 6.0.1; 6.1.0 before 6.2.0 |
| CVE-2026-75587 | 3.3 | Aug 17 | Plaintext pre-auth secret exposure via Desktop App diagnostics report Affected: before 6.2.3 |
| CVE-2025-13321 | 3.3 | Dec 17 | Mattermost Desktop App logging sensitive information and fails to clear data on server deletion Affected: before 6.0.0 |
| CVE-2025-1398 | 3.3 | Mar 17 | macOS TCC Bypass via Code Injection Affected: before 5.11.0 |
| CVE-2024-36287 | 3.3 | Jun 14 | Bypass of TCC restrictions on macOS Affected: through 5.7.0 |
| CVE-2023-5920 | 3.3 | Nov 2 | Lack Of Secure Keyboard Entry Protection in MacOS Desktop Affected: through 5.5.0 |
| CVE-2026-75588 | 2.6 | Sep 17 | Mattermost Desktop App plugin popout scheme validation bypass Affected: 6.2.0 before 6.2.3 |
Showing 9