Deepin vulnerabilities
We track 4 vulnerabilities in Deepin products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 24, 2025.
Latest Deepin vulnerabilities
- 8.4 High severity
dde-api-proxy: Improper Verification of Source of a Communication Channel
An issue was discovered in Deepin dde-api-proxy through 1.0.19 in which unprivileged users can access D-Bus services as root. Specifically, dde-api-proxy runs as root and forwards messages from arbitrary local users to legacy D-Bus methods in the actual D-Bus
- 7.8 High severity
dde_file_manager: Improper Privilege Management
Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged users via the D-Bus method.
- 7.8 High severity
developer-center: Improper Limitation of a Pathname to a Restricted Directory
Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Use
- 7.8 High severity
developer-center: Improper Limitation of a Pathname to a Restricted Directory
Deepin Linux's default document reader `deepin-reader` software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw that leads to remote command execution via crafted docx document. This is a file overwrite vulnerability. Remot