Discord records
4 published records for vendor Discord.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-24 Path Traversal: '../filedir'1
- CWE-426 Untrusted Search Path1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
40Plan | CVE-2021-29465No exploit | Remote file overwrite on discord-recon can result in DoS and Remote Code Executiondiscord · discord-recon · CWE-94 | Critical9.8 | 1.9%Apr 21, 2021 |
40Plan | CVE-2024-23739Proof of concept | An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodediscord · discord | Critical9.8 | 1.7%Jan 27, 2024 |
30Monitor | CVE-2021-29466No exploit | Path Traversal at Discord-Recon .recon Command Pathdiscord · discord-recon · CWE-24 | High7.5 | 1.6%Apr 21, 2021 |
29Monitor | CVE-2025-4525No exploit | Discord WINSTA.dll uncontrolled search pathdiscord · discord · CWE-426 | High7.3 | 0.3%May 10, 2025 |
- CVE-2021-2946540Plan
Remote file overwrite on discord-recon can result in DoS and Remote Code Execution
CriticalCVSS 9.8No exploitEPSS 1%discord · discord-reconApr 21, 2021
- CVE-2024-2373940Plan
An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNode
CriticalCVSS 9.8Proof of conceptEPSS 1%discord · discordJan 27, 2024
- CVE-2021-2946630Monitor
Path Traversal at Discord-Recon .recon Command Path
HighCVSS 7.5No exploitEPSS 1%discord · discord-reconApr 21, 2021
- CVE-2025-452529Monitor
Discord WINSTA.dll uncontrolled search path
HighCVSS 7.3No exploitEPSS 0%discord · discordMay 10, 2025