CVE-2025-66835

TrueConf Client version 8.5.2 is vulnerable to DLL hijacking due to an uncontrolled search path during the dynamic link library loading process. A local attacker can exploit this by introducing a specially crafted wfapi.dll file to execute arbitrary code within the context of the user. To remedia...