Vulnerabilities > Nextcloud > Desktop

DATE CVE VULNERABILITY TITLE RISK
2020-08-17 CVE-2020-8230 Out-of-bounds Write vulnerability in Nextcloud Desktop
A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory.
local
low complexity
nextcloud CWE-787
5.5
2020-08-10 CVE-2020-8229 Memory Leak vulnerability in Nextcloud Desktop
A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system.
local
low complexity
nextcloud CWE-401
5.5
2020-08-10 CVE-2020-8224 Code Injection vulnerability in Nextcloud Desktop
A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory.
local
low complexity
nextcloud CWE-94
7.8
2020-03-20 CVE-2020-8140 Code Injection vulnerability in Nextcloud Desktop
A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.
local
low complexity
nextcloud CWE-94
6.7