Skip to content
Threat Feed
Subscribe

Tag

Desktop-App

3 briefs RSS
critical advisory

Topluyo Desktop for Linux OS Command Injection (CVE-2026-115904)

Topluyo Desktop for Linux versions prior to 2026.9.2410 are vulnerable to OS Command Injection via the openExternalLinks function in utils.js, allowing unauthenticated attackers to achieve RCE through malicious link-handling.

Topluyo Desktop For Linux rce command-injection linux desktop-app
1r 1t 1c 1i
high advisory

Remote Code Execution in EdgeEver Desktop via IPC Handler

EdgeEver Desktop versions 1.92.0 through 1.112.0 contain a remote code execution vulnerability in the desktop:acp-probe IPC handler that allows arbitrary command execution via an insecure probeAcpAdapter function.

EdgeEver Desktop +1 vulnerability web-application desktop-app
3t 1c
high advisory

Heap-based Buffer Overflows in GIMP APNG and DDS Loaders

GIMP contains multiple heap-buffer-overflow vulnerabilities in its APNG and DDS file format loaders, which can lead to arbitrary code execution when a victim opens a specially crafted image file.

GIMP vulnerability remote-code-execution desktop-app code-execution
1t 5c updated