CVE-2025-66835: High severity TrueConf TrueConf Client vulnerability
Published Dec 30, 2025
·Updated
TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context.
Affected Software
2 affected components
TrueConf TrueConf Client
TrueConf TrueConf=8.5.2
Event History
Dec 30, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-66835?
CVE-2025-66835 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2025-66835?
To mitigate CVE-2025-66835, update TrueConf Client to version 8.5.3 or later, which addresses the DLL hijacking vulnerability.
3
Who is affected by CVE-2025-66835?
CVE-2025-66835 affects users of TrueConf Client version 8.5.2.
4
What kind of attacks can exploit CVE-2025-66835?
CVE-2025-66835 can be exploited by local attackers to execute arbitrary code within the user's context through a crafted wfapi.dll.
5
When was CVE-2025-66835 published?
CVE-2025-66835 was published in 2025, highlighting the vulnerability in TrueConf Client version 8.5.2.