MD
Product
Mattermost Desktop
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 19Low 9
Watch
Add Mattermost Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-8075 | 6.5 | Jul 17 | Posting a malicious markdown image crashes the Mattermost Desktop App Affected: before 5.13.6; after 6.0.0 through 6.0.2; 6.2.0 before 6.2.1 |
| CVE-2026-9602 | 6.5 | Jul 17 | Mattermost Desktop App crashes when malformed arguments are provided to some exposed IPC methods Affected: before 5.13.7; 6.0.0 through 6.0.2; 6.2.0 before 6.2.1 |
| CVE-2026-8683 | 6.5 | Jun 15 | Overly long URLs crash the Mattermost Desktop App Affected: through 5.13.0; 6.1.0 through 6.1.5 |
| CVE-2026-3471 | 6.5 | May 18 | Opening a window with {{javascript:alert()}} as URL causes crash in the Mattermost Desktop App Affected: through 5.4.13.0; 6.0.0 through 6.0.1; 6.1.0 before 6.2.0 |
| CVE-2026-1046 | 6.5 | Feb 16 | Arbitrary application execution via unvalidated server-controlled URLs in Help menu Affected: 5.13.0 before 5.13.3; 6.0.0 before 6.0.3 |
| CVE-2025-58084 | 6.5 | Oct 13 | Mattermost Desktop App crashes when clicking on malformed external URL Affected: before 5.13.1.0 |
| CVE-2024-45835 | 6.5 | Sep 16 | Insufficient Electron Fuses Configuration Affected: before 5.9.0 |
| CVE-2020-14455 | 6.5 | Jun 19 | An issue was discovered in Mattermost Desktop App before 4.4.0 Affected: before 4.4.0 |
| CVE-2025-55035 | 6.1 | Oct 16 | Mattermost Desktop DoS when user has basic authentication server configured Affected: before 5.13.1.0 |
| CVE-2024-37182 | 6.1 | Jun 14 | Lack of permissions prompting when opening external URLs Affected: through 5.7.0 |
| CVE-2020-14454 | 6.1 | Jun 19 | An issue was discovered in Mattermost Desktop App before 4.4.0 Affected: before 4.4.0 |
| CVE-2023-5339 | 5.5 | Oct 17 | Mattermost Desktop logs all keystrokes during initial run after fresh installation Affected: through 5.4.0 |
| CVE-2023-2000 | 5.4 | May 2 | Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website Affected: through 5.2.2 |
| CVE-2024-39772 | 5.3 | Sep 16 | Silent Desktop Screenshot Capture Affected: before 5.9.0 |
| CVE-2023-5875 | 5.3 | Nov 2 | Lack of Hardening against media exploitation from a remote origin Affected: through 5.5.0 |
| CVE-2023-5876 | 5.3 | Nov 2 | Regex DoS from a malicious server enrolled in Desktop Affected: through 5.5.0 |
| CVE-2018-21265 | 5.3 | Jun 19 | An issue was discovered in Mattermost Desktop App before 4.0.0 Affected: before 4.0.0 |
| CVE-2026-75025 | 4.7 | Sep 16 | Mattermost Desktop local network access from server-rendered content Affected: 6.2.0 before 6.2.3 |
| CVE-2026-1628 | 4.6 | Mar 2 | Mattermost allows external websites to open within the app, exposing preload functionality to non-trusted sites. Affected: before 5.13.4 |
Showing 19