Description
Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ankitects | Anki | < 25.02.5 | 25.02.5 |
Medium · 6.7
CVE-2025-62186
EUVD-2025-31886GHSA-jjrh-4jr8-87g7
Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL schem…
Published Oct 7, 2025 · Updated Oct 8, 2025 · Assigned by mitre