Product by Nextcloud
Nextcloud Talk
20 known vulnerabilities in Nextcloud Talk (Nextcloud), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-8180 | Nextcloud Talk: Code Injection | 9.9 | |
| High | CVE-2021-32689 | Nextcloud Talk not properly disassociating users from chats after account deletion | 8.1 | |
| Medium | CVE-2021-39222 | XSS in Talk | 6.4 | |
| Medium | CVE-2021-32676 | Session Fixation in Nextcloud Talk | 6.5 | |
| Medium | CVE-2022-35932 | Missing rate limit when trying to join a password protected Nextcloud Talk conversation | 3.5 | |
| Medium | CVE-2021-41180 | Geolocation preview links can be set to arbitrary links in nextcloud talk | 4.7 | |
| Medium | CVE-2022-24887 | Open Redirect in Nextcloud Talk | 4.3 | |
| Medium | CVE-2018-3781 | Nextcloud/talk: Cross-site Scripting | 5.4 | |
| Medium | CVE-2019-15619 | Nextcloud Server: Cross-site Scripting | 4.8 | |
| High | CVE-2023-39957 | Path traversal allows tricking the Talk Android app into writing files into it's root directory | 7.2 | |
| Medium | CVE-2022-39212 | Last video frame is still sent after video is disabled in a call in Nextcloud Talk | 4.3 | |
| Medium | CVE-2023-45149 | Password of talk conversations can be bruteforced in Nextcloud | 4.3 | |
| Medium | CVE-2022-24890 | Exposure of Private Personal Information to an Unauthorized Actor in Nextcloud Talk | 2.4 | |
| Medium | CVE-2023-30540 | Chat poll data can still be queried from API after purging history in Nextcloud talk | 3.5 | |
| Low | CVE-2019-15620 | Nextcloud Talk: Improper Authentication | 2.7 | |
| Medium | CVE-2025-66556 | Nextcloud talk allows participants to blindly delete poll drafts of other users by ID | 3.5 | |
| Low | CVE-2023-28845 | Chat room membership disclosed via autocompletion in Nextcloud talk | 3.5 | |
| Low | CVE-2023-22473 | Passcode bypass on Talk-Android app | 2.1 | |
| Medium | CVE-2022-41926 | Nextcloud Talk Android broadcast incorrect permission handling | 3.3 | |
| Low | CVE-2021-41181 | Nextcloud Talk app exposes chat messages on lockscreen | 2.4 |