CVE Feed

    Dashboard / CVE / CVE-2024-35222

    CVE-2024-35222

    Tauri is a framework for building binaries for all major desktop platforms. Remote origin iFrames in Tauri applications can access the Tauri IPC endpoints without being explicitly allowed in the `dangerousRemoteDomainIpcAccess` in v1 and in the `capabilities` in v2. Valid commands with potentially unwanted consequences ("delete project", "transfer credits", etc.) could be invoked by an attacker that controls the content of an iframe running inside a Tauri app. This vulnerability has been patched in versions 1.6.7 and 2.0.0-beta.19.

    Published:May 23, 2024
    Last Modified:Apr 15, 2026
    EPS:May 23, 2024
    EPSS Score:0.00037
    CVSS Score:5.9

    Affected Products

    Vendor
    Tauri
    Product
    Tauri

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2026-42184 (CVSS 6.1) — Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a flaw in Taur…
    CVE-2023-46115 (CVSS 8.4) — Tauri is a framework for building binaries for all major desktop platforms. This advisory is not describing a …
    CVE-2023-34460 (CVSS 4.8) — Tauri is a framework for building binaries for all major desktop platforms. The 1.4.0 release includes a regre…
    CVE-2023-31134 (CVSS 4.8) — Tauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly i…
    CVE-2022-46171 (CVSS 6.8) — Tauri is a framework for building binaries for all major desktop platforms. The filesystem glob pattern wildca…
    CVE-2022-41874 (CVSS 2.6) — Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1…
    CVE-2022-39215 (CVSS 8.3) — Tauri is a framework for building binaries for all major desktop platforms. Due to missing canonicalization wh…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High