rufus vulnerabilities

1 known vulnerability in rufus from Pbatard. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  rufus: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2026-23988Jan 22, 2026Pbatard

  Rufus is a utility that helps format and create bootable USB flash drives. Versions 4.11 and below contain a race condition (TOCTOU) in src/net.c during the creation, validation, and execution of the Fido PowerShell script. Since Rufus runs with elevated privi