Vendor/product archive

todesktop / builder CVEs

Beta · best-effort

3 CVEs tagged to todesktop / builder — 1 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to todesktop vendor archive

CVE-2025-67231

Published Jan 23, 2026

A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context of a user's browser via a crafted paylo…

CVSS 5.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2025-67230

Published Jan 23, 2026

Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers witho…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

CVE-2025-67229

Published Jan 23, 2026

An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path attacker to spoof backend responses by e…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1