CVE-2006-5807 json
Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications…
published 2006-11-08 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-5791
- cvss
- 4.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 27%
- public exploits
- 0
- none known
Summary
Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion".
Exploit prediction
0.34% chance of exploitation in the next 30 days, higher than 27% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
-
cisco.com
/warp/public/707/cisco-sa-20061108-csd.shtml
vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/30130
vdb-entry
-
securitytracker.com
/id?1017195
vdb-entry
-
secunia.com
/advisories/22747
third-party-advisory
-
osvdb.org
/30307
vdb-entry
-
vupen.com
/english/advisories/2006/4409
vdb-entry
-
securityfocus.com
/bid/20964
vdb-entry
Sources
- CVE List CVE-2006-5807
- NVD CVE-2006-5807
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.