Zulip Desktop

zulip_desktop

Vendor: Zulip • 2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-10858 1Zulip 1Zulip Desktop Jun 17, 2026 Feb 5, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler.
CVE-2020-10857 1Zulip 1Zulip Desktop Jun 17, 2026 Feb 5, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.