Deskflow is a keyboard and mouse sharing app. (CVE-2026-65976)
Description
Deskflow versions from 1.17.0 up to but not including continuous build 1.26.0.300 contain a vulnerability where a connected peer can send repeated clipboard data messages that cause memory exhaustion on the server or client. This occurs because data is appended beyond the declared size and clipboard limit before validation. The issue is fixed starting with continuous build 1.26.0.300.
CVSS v3.1
Score 6.5medium
Affected software
pkg:deb/ubuntu/deskflow?arch=source&distro=stonkingpkg:deb/ubuntu/deskflow?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Deskflow is a keyboard and mouse sharing application. Versions from 1.17.0 until continuous build 1.26.0.300 are vulnerable to a memory exhaustion issue caused by a connected peer sending repeated DCLP DataChunk messages to ClipboardChunk::assemble(). This leads to the server or client appending data beyond the declared DataStart size and configured clipboard limit before DataEnd validation, exhausting receiver memory. The vulnerability is resolved in continuous build 1.26.0.300.
Potential Impact
An unauthenticated remote attacker (connected peer) can cause a denial of service by exhausting memory on the Deskflow server or client through repeated clipboard data messages. This does not impact confidentiality or integrity but results in availability disruption.
Mitigation Recommendations
Upgrade Deskflow to continuous build 1.26.0.300 or later, where this vulnerability is fixed. No other mitigation or workaround is indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-65976
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:26.10","Ubuntu:26.04:LTS"]
- Cvss Version
- 3.1
Threat ID: 6ad3f5b32cdf04f656662836
Added to database: 10/17/2026, 22:24:51 UTC
Last enriched: 10/18/2026, 00:11:15 UTC
Last updated: 10/18/2026, 00:11:15 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.