Products: 3
    Vulnerabilities: 8
    Known Exploited: 0
    1
    Critical Level Threats
    3
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-104480

    Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership

    Last Modified: Oct 02, 2026
    Published: Oct 02, 2026

    CVE-2026-0776

    Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    Last Modified: Apr 18, 2026
    Published: Jan 23, 2026

    CVE-2026-24332

    Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible (and not actually offline) because the response to a WebSocket API request includes the user in the presences array (with "status": "offline"), whereas offline users are omitted from the presences array. This is arguably inconsistent with the UI description of Invisible as "You will appear offline." NOTE: a third-party report suggests that this was remediated later in 2026.

    Last Modified: Sep 21, 2026
    Published: Jan 22, 2026

    CVE-2025-4525

    Discord WINSTA.dll uncontrolled search path

    Last Modified: Jul 01, 2025
    Published: May 10, 2025

    CVE-2025-0732

    Discord profapi.dll untrusted search path

    Last Modified: Apr 15, 2026
    Published: Jan 27, 2025
    Items Per Page
    Discord Vulnerabilities & Security CVEs | CVE-DB