Skip to content
OpenAdvisories

Vendor

AnyDesk

7 known vulnerabilities.

AnyDesk at a glance

Last 12 months
6
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 1 vulnerability Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 2 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability, 1 critical November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202611
Sep 202600
Aug 202600
Jul 202620
Jun 202610
May 202600
Apr 202600
Mar 202600
Feb 202610
Jan 202600
Dec 202510
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202410

Products

AnyDesk 7

Latest advisories

  • High max 9.8
    WID-SEC-2026-3882 1 CVE

    AnyDesk: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in AnyDesk ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.

    AnyDesk Linux Windows
  • Medium max 4.7
    WID-SEC-2026-2315 2 CVEs

    AnyDesk: Mehrere Schwachstellen ermöglichen Denial of Service

    Ein Angreifer kann mehrere Schwachstellen in AnyDesk ausnutzen, um einen Denial of Service Angriff durchzuführen.

    AnyDesk Windows
  • Medium max 6.9
    WID-SEC-2025-2829 1 CVE

    AnyDesk: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in AnyDesk ausnutzen, um beliebigen Programmcode auszuführen.

    AnyDesk Windows
  • High max 9.8
    WID-SEC-2025-2510 4 CVEs rev. 2

    AnyDesk: Mehrere Schwachstellen

    Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in AnyDesk ausnutzen, um Dateien zu manipulieren, die Authentifizierung zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angrif…

    AnyDesk Windows
    first Nov 6, 2025
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Critical 9.8
    CVE-2026-109390

    AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow…

    AnyDesk AnyDesk
  • Medium 4.7
    CVE-2026-15681

    AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability

    AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privilege…

    AnyDesk AnyDesk
  • Medium 4.7
    CVE-2026-15682

    AnyDesk Support Information Link Following Denial-of-Service Vulnerability

    AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privil…

    AnyDesk AnyDesk
  • High 7.8
    CVE-2016-20094

    AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege

    AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation. Attackers can insert malicious executables in the system root path that execute with…

    AnyDesk AnyDesk
  • High 7.8
    CVE-2019-25261

    AnyDesk 5.4.0 - Unquoted Service Path

    AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially inject malicious executables. Attackers can exploit the unquoted binary path to place malicious files in service exec…

    AnyDesk AnyDesk
  • Medium 6.9
    CVE-2025-34499

    AnyDesk 9.0.1 Unquoted Service Path Privilege Escalation Vulnerability

    AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted service path configuration to inject malicious exec…

    AnyDesk AnyDesk
  • Medium 5.5
    CVE-2024-12754

    AnyDesk Link Following Information Disclosure Vulnerability

    AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the targ…

    AnyDesk AnyDesk