Nextcloud Desktop vulnerabilities

• nextcloud desktop, kiteworks security-advisories +1 more Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directory CVE-2025-66549 Fix available 2.4 LowDecember 5, 2025
• nextcloud desktop, kiteworks security-advisories +1 more Nextcloud Desktop 3rdparty applications can create share links via socket API CVE-2025-47792 Fix available 5.0 MediumMay 16, 2025
• nextcloud desktop, kiteworks security-advisories +1 more Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty CVE-2024-52510 Public exploitFix available 4.2 MediumNovember 15, 2024
• nextcloud desktop In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the... CVE-2024-46958 Fix available 9.1 CriticalSeptember 16, 2024
• nextcloud desktop, kiteworks security-advisories +1 more Code injection in Nextcloud Desktop Client for macOS CVE-2024-37885 3.8 LowJune 14, 2024
• nextcloud desktop, kiteworks security-advisories +1 more Nextcloud Desktop client does not verify received singed certificate in end-to-end encryption CVE-2023-29000 Fix available 5.4 MediumApril 4, 2023
• nextcloud desktop, nextcloud, kiteworks security-advisories +2 more Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders CVE-2023-28999 Fix available 6.9 MediumApril 4, 2023
• nextcloud desktop, kiteworks security-advisories +1 more Nextcloud Desktop client misbehaves with E2EE when the server returns empty list of metadata keys CVE-2023-28998 Fix available 6.7 MediumApril 4, 2023
• nextcloud desktop, kiteworks security-advisories +1 more Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files CVE-2023-28997 Fix available 6.7 MediumApril 4, 2023
• nextcloud desktop, kiteworks security-advisories +1 more Self reflected HTML injection in Desktop client CVE-2023-23942 Fix available 5.4 MediumFebruary 6, 2023
• nextcloud desktop, kiteworks security-advisories +1 more Nextcloud Deck Desktop Client is vulnerable to Cross-Site Request Forgery (CSRF) via malicious link CVE-2023-22472 Fix available 5.3 MediumJanuary 9, 2023
• nextcloud desktop, kiteworks security-advisories +1 more nextcloudcmd incorrectly trusts bad TLS certificates CVE-2022-39334 Fix available 3.9 LowNovember 25, 2022
• nextcloud desktop, kiteworks security-advisories +1 more Cross-site scripting (XSS) in Nextcloud Desktop Client CVE-2022-39333 Fix available 4.6 MediumNovember 25, 2022
• nextcloud desktop, kiteworks security-advisories +1 more Cross-site scripting (XSS) in Nextcloud Desktop Client CVE-2022-39332 Fix available 4.6 MediumNovember 25, 2022
• nextcloud desktop, kiteworks security-advisories +1 more Cross-site Scripting (XSS) in Nexcloud Desktop Client CVE-2022-39331 Fix available 4.6 MediumNovember 25, 2022
• nextcloud desktop, kiteworks security-advisories +1 more Nextcloud Desktop vulnerable to code injection via malicious link CVE-2022-41882 Fix available 6.6 MediumNovember 11, 2022
• nextcloud desktop, kiteworks security-advisories +1 more Untrusted Search Path in Nextcloud Desktop Client CVE-2021-37617 7.3 HighAugust 18, 2021
• nextcloud desktop, debian linux, kiteworks security-advisories +2 more End-to-end encryption device setup did not verify public key CVE-2021-32728 Fix available 6.5 MediumAugust 18, 2021
• nextcloud desktop, debian linux +1 more nextcloud-desktop - security update CVE-2021-22895 Fix available 5.9 MediumJune 11, 2021
• nextcloud desktop, fedoraproject fedora +1 more Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing... CVE-2021-22879 Fix available 8.8 HighApril 14, 2021
• nextcloud desktop A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away... CVE-2020-8225 Fix available 7.5 HighSeptember 18, 2020
• nextcloud desktop A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html ... CVE-2020-8189 Fix available 5.4 MediumAugust 21, 2020
• nextcloud desktop Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a... CVE-2020-8227 Fix available EPSS 25.8% 6.8 MediumAugust 21, 2020
• nextcloud desktop A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR... CVE-2020-8230 5.5 MediumAugust 17, 2020
• nextcloud desktop A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a... CVE-2020-8224 7.8 HighAugust 10, 2020
• nextcloud desktop A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS... CVE-2020-8229 5.5 MediumAugust 10, 2020
• nextcloud desktop A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when... CVE-2020-8140 6.7 MediumMarch 20, 2020