Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
signal signal-desktop vulnerabilities and exploits
(subscribe to this query)
187
VMScore
CVE-2018-14023
Open Whisper Signal (aka Signal-Desktop) prior to 1.15.0-beta.10 allows information leakage.
Signal Signal-desktop 1.15.0
Signal Signal-desktop
NA
CVE-2023-24069
Signal Desktop prior to 6.2.0 on Windows, Linux, and macOS allows an malicious user to obtain potentially sensitive attachments sent in messages from the attachments.noindex directory. Cached attachments are not effectively cleared. In some cases, even after a self-initiated file...
Signal Signal-desktop
384
VMScore
CVE-2018-11101
Open Whisper Signal (aka Signal-Desktop) up to and including 1.10.1 allows XSS via a resource location specified in an attribute of a SCRIPT, IFRAME, or IMG element, leading to JavaScript execution after a reply, a different vulnerability than CVE-2018-10994. The attacker needs t...
Signal Signal-desktop
1 Article
614
VMScore
CVE-2019-19954
Signal Desktop prior to 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmic.exe file.
Signal Signal-desktop
384
VMScore
CVE-2018-10994
js/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) prior to 1.10.1 allows XSS via a URL.
Signal Signal-desktop
1 Article
NA
CVE-2023-24068
Signal Desktop prior to 6.2.0 on Windows, Linux, and macOS allows an malicious user to modify conversation attachments within the attachments.noindex directory. Client mechanisms fail to validate modifications of existing cached files, resulting in an attacker's ability to i...
Signal Signal-desktop
383
VMScore
CVE-2019-9970
Open Whisper Signal (aka Signal-Desktop) up to and including 1.23.1 and the Signal Private Messenger application up to and including 4.35.3 for Android are vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces...
Signal Signal-desktop
Signal Private Messenger
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started