CVE-2025-66835

7.1 highEPSS 0.2%

High (7.1) in trueconf trueconf. EPSS 0.2% chance of exploitation in the next 30 days.

TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2025-12-30
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

trueconf:trueconf

References

https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66835/README.md
https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66835/README.md

Check your stack JSON