CVE-2025-66835
Unknown
Unknown - Not Provided
DLL Hijacking in TrueConf Client 8.5.2 Enables Code Execution
Publication date: 2025-12-30
Last updated on: 2025-12-30
Assigner: MITRE
Description
Description
TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| trueconf | trueconf_client | 8.5.2 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in TrueConf Client 8.5.2 is a DLL hijacking issue involving a crafted wfapi.dll file. It allows local attackers to execute arbitrary code within the context of the user running the application by exploiting the way the software loads DLL files. [1]
How can this vulnerability impact me? :
An attacker exploiting this vulnerability can run arbitrary code with the same privileges as the user, potentially leading to unauthorized actions such as data theft, installation of malware, or further system compromise. [1]
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70