Trueconf vulnerabilities

2 known vulnerabilities in Trueconf from TrueConf. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  TrueConf Client Download of Code Without Integrity Check Exploited

  CVE-2026-3502Mar 30, 2026TrueConfEPSS 5.85%

  TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, th

• 7.1 High severity

  Trueconf: Uncontrolled Search Path Element

  CVE-2025-66835Dec 30, 2025TrueConf

  TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context.