Discord vulnerabilities
We track 3 vulnerabilities in Discord products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 2, 2026.
Latest Discord vulnerabilities
- 9.4 Critical severity
libdave: Detection of Error Condition Without Action
Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path (the voice gateway, or an equivalent position able to add, alter, or wit
- 7.3 High severity
Client: Uncontrolled Search Path Element
Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Discord Client. An attacker must first obtain the ability to execute low-pri
- 7.8 High severity
Discord: Untrusted Search Path
A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows. Affected by this issue is some unknown functionality in the library WINSTA.dll. The manipulation leads to uncontrolled search path. The attack needs to be approac