Vulnerabilities > Zulip > Zulip Desktop
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-02-05 | CVE-2020-10858 | Incorrect Permission Assignment for Critical Resource vulnerability in Zulip Desktop Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler. | 5.0 |
| 2021-02-05 | CVE-2020-10857 | Unspecified vulnerability in Zulip Desktop Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution. | 7.5 |