CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,496 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,496
Show in the list
Critical, last 7 days
359
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product rustdesk:rustdesk. Show all products

14 CVEs, showing 1 to 14
CVESeverityTitlePublished
CVE-2026-30791High 7.5Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Config import, URI scheme handler,…Mar 5, 2026
CVE-2026-30783Critical 9.8A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config management modules) allows Privilege Abus…Mar 5, 2026
CVE-2026-30785Medium 5.5Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client…Mar 5, 2026
CVE-2026-30789Critical 9.8Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, Mac…Mar 5, 2026
CVE-2026-30792High 8.1A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options engine modules) allows Application…Mar 5, 2026
CVE-2026-30793Critical 9.8Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, FFI bridge modules) allows Privi…Mar 5, 2026
CVE-2026-30795High 7.5Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync loop modules) allows Sniffing A…Mar 5, 2026
CVE-2026-30797High 8.1Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, config import modules) allows Application AP…Mar 5, 2026
CVE-2026-30798High 7.5Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (He…Mar 5, 2026
CVE-2026-76840Critical 9.6RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Length
Assigned by VulnCheck
Aug 24, 2026
CVE-2026-73102Medium 5.7RustDesk Path Traversal via macOS Clipboard File-Paste
Assigned by VulnCheck
Aug 26, 2026
CVE-2026-73108High 7.5RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodec
Assigned by VulnCheck
Aug 26, 2026
CVE-2026-100388Medium 5.4RustDesk before 1.5.0 Missing Authorization Check on Incoming File Clipboard Messages
Assigned by VulnCheck
Sep 25, 2026
CVE-2026-100417Low 3.1RustDesk before 1.5.0 One-Way File Transfer Bypass
Assigned by VulnCheck
Sep 25, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.