CVE-2020-28646: ownCloud Desktop Client

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain directories when they were present.

Affected products

• ownCloud ownCloud Desktop Client: before 2.7 (fixed in 2.7)

Published 2021-02-26. Last modified 2026-06-17.