Home Artists Posts Import Register

Content

A vulnerability in the discord desktop app could allow for RCE attacks. Discord has patched the flaw after it was reported through their bug bounty program!

Files

Discord desktop app vulnerability chain triggered remote code execution attacks | ZDNet

Discord has patched a critical issue in the desktop version of the messaging app which left users vulnerable to remote code execution (RCE) attacks. Bug bounty hunter Masato Kinugawa developed an exploit chain leading to RCE several months ago and published a blog post over the weekend describing the technical details of the method, which combines multiple bugs.

Comments

Anonymous

Has anyone been able to find the patched version? The ZDnet article doesn’t list dates but news.ycombinator makes it look like this was patched in early August

Anonymous

Will this help motivate people to switch to Element?