CVE-2026-68955 | BDVDB-2026-372801 Detail
Rakuten KoboThe installer for Rakuten Kobo Desktop Application (Windows version)
Description#
The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privileges of the user who performed the installation.
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-427 Uncontrolled Search Path Element
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.