Vulnerabilities (CVE)

Filtered by vendor Mattermost Subscribe
Filtered by product Mattermost Desktop
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-39772 1 Mattermost 1 Mattermost Desktop 2024-11-01 N/A 5.3 MEDIUM
Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs.
CVE-2024-39613 1 Mattermost 1 Mattermost Desktop 2024-09-20 N/A 7.8 HIGH
Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of a user's machine to cause remote code execution on that machine.