[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fl99ZZqZLwxIgFKA6mB19Xqe-hv8-nfqbLWVmaXc6U5U":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":81,"topProductsByCves":82,"seoMetadata":84,"meta":93},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},1822,"anydesk",1,11,0,189,"2024-12-30","a",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},6470,"Anydesk is a technology vendor with 1 tracked product and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,35,41,48,54,60,65,71,76],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2020-13160","AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.","2020-06-09",9.8,"v3.1","Critical",false,0.80551,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":24,"cvssVersion":33,"severity":26,"isKev":27,"epssScore":34},"CVE-2017-14397","AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.","2017-09-12","v3.0",0.01542,{"cveId":36,"description":37,"publishedDate":13,"cvssScore":38,"cvssVersion":33,"severity":39,"isKev":27,"epssScore":40},"CVE-2024-12754","AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the handling of background images. By creating a junction, an attacker can abuse the service to read arbitrary files. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-23940.",5.5,"Medium",0.01181,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":25,"severity":46,"isKev":27,"epssScore":47},"CVE-2021-44426","An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local ~\u002FDownloads\u002F directory is possible if the victim is using the AnyDesk Windows client to connect to a remote machine, if an attacker is also connected remotely with AnyDesk to the same remote machine. The upload is done without any approval or action taken by the victim.","2022-09-12",8.8,"High",0.01157,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":33,"severity":46,"isKev":27,"epssScore":53},"CVE-2018-13102","AnyDesk before \"12.06.2018 - 4.1.3\" on Windows 7 SP1 has a DLL preloading vulnerability.","2018-07-03",7.8,0.01125,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":25,"severity":46,"isKev":27,"epssScore":59},"CVE-2023-26509","AnyDesk 7.0.8 allows remote Denial of Service.","2023-07-03",7.5,0.01117,{"cveId":61,"description":62,"publishedDate":44,"cvssScore":63,"cvssVersion":25,"severity":39,"isKev":27,"epssScore":64},"CVE-2021-44425","An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.3. An unnecessarily open listening port on a machine in the LAN of an attacker, opened by the Anydesk Windows client when using the tunneling feature, allows the attacker unauthorized access to the local machine's AnyDesk tunneling protocol stack (and also to any remote destination machine software that is listening to the AnyDesk tunneled port).",6.5,0.00594,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":25,"severity":46,"isKev":27,"epssScore":70},"CVE-2022-32450","AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own %APPDATA% folder (used for ad.trace and chat) but the product runs as SYSTEM when writing chat-room data there.","2022-07-18",7.1,0.00538,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":52,"cvssVersion":25,"severity":46,"isKev":27,"epssScore":75},"CVE-2020-35483","AnyDesk before 6.1.0 on Windows, when run in portable mode on a system where the attacker has write access to the application directory, allows this attacker to compromise a local user account via a read-only setting for a Trojan horse gcapi.dll file.","2021-01-11",0.00473,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":52,"cvssVersion":25,"severity":46,"isKev":27,"epssScore":80},"CVE-2020-27614","AnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that does not properly validate client requests and allows local privilege escalation.","2020-12-09",0.00353,[],[83],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":85,"metaDescription":86,"keywords":87,"structuredData":88},"Anydesk - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Anydesk covering 1 product with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Anydesk vulnerabilities, Anydesk security, Anydesk CVE, Anydesk threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":89,"@type":90,"name":91,"description":86,"url":92},"https:\u002F\u002Fschema.org","Organization","Anydesk","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fanydesk",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":94,"apiVersion":95},"2026-10-18T17:26:57.482Z","3.0"]