Discord's vulnerability profile centers on its widely used voice-communication and community-platform application, with observed weaknesses concentrated in code injection, path traversal, and OS command injection—flaws characteristic of application input handling and file-access controls. Treat this as a compact vendor profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Discord over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-23739CRITICAL An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. | Jan 28, 2024 | 9.8 | 30 | NO | NO |
CVE-2021-29465CRITICAL Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on t | Apr 22, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-29466HIGH Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the server that can disclose i | Apr 22, 2021 | 7.5 | 24 | NO | NO |
CVE-2025-4525HIGH A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows. Affected by this issue is some unknown functionality in the library WINSTA.dll. Th | May 10, 2025 | 7.8 | 22 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Discord.
Media articles that mention a CVE ID that affects a product developed by Discord — matched by CVE ID, not by vendor name.