CVE-2025-27917

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and…

High · published November 6, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
42.2
In the wild
Unconfirmed
What it is

⚡ A sneaky deserialization flaw in AnyDesk can lead to Remote Denial of Service, bringing your seamless connections to a screeching halt! 🔥 Think of it like a delivery truck that runs out of gas before reaching its destination. If the driver miscalculates the fuel needed, they could end up stranded and unable to deliver any packages — just like this vulnerability can leave your remote sessions dead in the water. An attacker might exploit this vulnerability to cause the application to crash, resulting in a frustrating disruption of service. This means that your vital remote access could be rendered useless, halting productivity and communication when you need it most!

Put simply

Think of it like a delivery truck that runs out of gas before reaching its destination. If the driver miscalculates the fuel needed, they could end up stranded and unable to deliver any packages — just like this vulnerability can leave your remote sessions dead in the water. This vulnerability results from incorrect deserialization that causes failed memory allocation and a NULL pointer dereference in AnyDesk apps, affecting various platforms including Windows, macOS, Linux, iOS, and Android before their respective fixed versions.

What to do

An attacker might exploit this vulnerability to cause the application to crash, resulting in a frustrating disruption of service. This means that your vital remote access could be rendered useless, halting productivity and communication when you need it most! To protect your systems, update AnyDesk to at least version 9.0.5 for Windows, 9.0.1 for macOS, 7.0.0 for Linux, 7.1.2 for iOS, and 8.0.0 for Android. Regularly check for updates to stay ahead of security vulnerabilities! You've got this! By following these steps, you're on your way to fortifying your remote access. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00505 · 42.2th percentile
Published
2025-11-06T00:00Z
EPSS history
Timeline
  • 06 NOV 00:00Z
    An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and…
    cvelistv5