Deskflow vulnerabilities
We track 5 vulnerabilities in Deskflow products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on August 17, 2026.
Latest Deskflow vulnerabilities
- 8.2 High severity
deskflow: Out-of-bounds Read
Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions (DSOP) values to ServerProxy::setOptions() in src/lib/client/ServerProxy.cpp so that the value following a mod
- 8.2 High severity
deskflow: Out-of-bounds Read
Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.296, a malicious Deskflow server can send an odd-length DSOP vector to ServerProxy::setOptions() in src/lib/client/ServerProxy.cpp, causing the missing value after the fina
- 7.5 High severity
deskflow: Uncontrolled Resource Consumption
Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.167, a remote, unauthenticated denial of service (DoS) vulnerability affects Deskflow servers running with TLS enabled (the default). When any TCP peer connects to the listening port and its first b
- 7.8 High severity
deskflow: Missing Authentication for Critical Functionality
Deskflow is a keyboard and mouse sharing app. In 1.20.0, 1.26.0.134, and earlier, Deskflow daemon runs as SYSTEM and exposes an IPC named pipe with WorldAccessOption enabled. The daemon processes privileged commands without authentication, allowing any local u
- 8.8 High severity
deskflow: Buffer Copy without Checking Size of Input
Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.138, a remote memory-safety vulnerability in Deskflow's clipboard deserialization allows a connected peer to trigger an out-of-bounds read by sending a malformed clipboard update. The issue is in th