PT-2025-45051 · Tencent · Tencent Docs Desktop

Published 2025-11-04 · Updated 2026-02-10 · CVE-2025-56230

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tencent Docs Desktop versions 3.9.20 and earlier

Description The update component in Tencent Docs Desktop does not properly validate SSL certificates. This could allow for potential security risks during the update process.

Recommendations Update to a version later than 3.9.20. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-599

Related Identifiers

CVE-2025-56230

Affected Products

Tencent Docs Desktop

References · 5

• 🔥 https://notion.so/CVE-2025-56230-1a74e9f2a40d80dca0a2d0615dc7ac5a · Exploit
• https://osv.dev/vulnerability/CVE-2025-56230 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56230 · Security Note
• https://t.me/CVEtracker/36559 · Telegram Post
• https://t.me/cveNotify/151603 · Telegram Post