EUVD-2026-60463Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Client must initiate connection to malicious server (UI:R); once connected, server delivers payload autonomously with no privilege requirement on the victim system.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
4DescriptionCVE.org
Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.296, a malicious Deskflow server can send an odd-length DSOP vector to ServerProxy::setOptions() in src/lib/client/ServerProxy.cpp, causing the missing value after the final option key to be read beyond the vector during the PacketStreamFilter::filterEvent to ServerProxy::handleData() to ServerProxy::parseHandshakeMessage() call chain and crash the connected client. This issue is fixed in continuous build 1.26.0.296.
AnalysisAI
Out-of-bounds read in Deskflow's client-side ServerProxy::setOptions() allows a malicious Deskflow server to crash any connected client by sending an odd-length DSOP options vector during the handshake sequence. Affected releases span from 1.17.0 through all continuous builds before 1.26.0.296, covering the full client codebase across five source files. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The Deskflow client must establish a network connection to a server controlled by the attacker - either by direct user configuration or through network-level redirection (e.g., mDNS spoofing). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD-assigned CVSS 8.2 (AV:N/AC:L/PR:N/UI:N) overstates practical risk somewhat. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to Deskflow continuous build 1.26.0.296 or later; this version incorporates the fix from commit 8266fbbe6af93fa370018886c7f1f35d2cee8b3f (https://github.com/deskflow/deskflow/commit/8266fbbe6af93fa370018886c7f1f35d2cee8b3f), which adds odd-length vector validation in all five affected source files. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems running Deskflow and identify which versions (1.17.0 through those before 1.26.0.296) are deployed; document the trust posture of all production Deskflow servers and their network placement. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Out-of-bounds memory read in Deskflow clients prior to continuous build 1.26.0.299 allows a network-reachable malicious
Local privilege escalation in Deskflow (all versions up to 1.20.0 stable and 1.26.0.134 continuous) allows any low-privi
Remote denial of service in Deskflow servers (versions prior to 1.26.0.167) running with TLS enabled - the default - let
Out-of-bounds memory read in Deskflow's clipboard deserialization allows authenticated remote peers to crash the applica
Memory exhaustion in Deskflow's clipboard protocol subsystem allows a connected peer to crash the receiving process by f
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allVendor StatusVendor
SUSE
Severity: ImportantShare
External POC / Exploit Code
Leaving vuln.today