CVE-2025-66835

PoC —

CVSS 3.1

7.1 high

EPSS

<1%p8

Published

Dec 30, 2025 (Dec 30, 2025)

Modified

Jul 5, 2026

Description

TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context.

Vendors: trueconf
Products: trueconf
Weakness: CWE-427
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.