ToDesktop records

3 published records for vendor todesktop.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-67229No exploit	An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path atodesktop · builder · CWE-295 Pre-auth Weak crypto	Critical9.8	—	0.3%	Jan 23, 2026
28Monitor	CVE-2025-67230No exploit	Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to todesktop · builder · CWE-276	High7.1	—	0.2%	Jan 23, 2026
23Monitor	CVE-2025-67231No exploit	A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context todesktop · builder · CWE-79 pre-auth RCE XSS	Medium5.9	—	0.3%	Jan 23, 2026

CVE-2025-67229
39Monitor
An improper certificate validation vulnerability exists in ToDesktop Builder v0.32.1 This vulnerability allows an unauthenticated, on-path a
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Weak crypto
todesktop · builderJan 23, 2026
CVE-2025-67230
28Monitor
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to
HighCVSS 7.1No exploitEPSS 0%
todesktop · builderJan 23, 2026
CVE-2025-67231
23Monitor
A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context
MediumCVSS 5.9No exploitEPSS 0%
- pre-auth RCE
- XSS
todesktop · builderJan 23, 2026