CVE-2025-26624

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Rufus is a utility that helps format and create bootable USB flash drives. A DLL hijacking vulnerability in Rufus 4.6.2208 and earlier versions allows an attacker loading and executing a malicious DLL with escalated privileges (since the executable has been granted higher privileges during the time of launch) due to the ability to inject a malicious `cfgmgr32.dll` in the same directory as the executable and have it side load automatically. This is fixed in commit `74dfa49`, which will be part of version 4.7. Users are advised to upgrade as soon as version 4.7 becomes available. There are no known workarounds for this vulnerability.

Metrics

CVSS 4.0 6.8/10CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-426CWE-427

Affected software

No affected versions have been published.

Timeline

Published
Feb 18, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-266258.6Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tCVE-2025-266266.5The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions priCVE-2025-266277.0Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate prCVE-2025-266285.5Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally.CVE-2025-266297.8Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-26639.8A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability isCVE-2025-266307.8Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.CVE-2025-266317.3Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.CVE-2025-266337.0Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.CVE-2025-266347.5Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.CVE-2025-266356.5Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.CVE-2025-266365.5Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose informa
CVE-2025-26624: Medium severity, CVSS 6.8 | Vulnix