Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rufus is a utility that helps format and create bootable USB flash drives. A DLL hijacking vulnerability in Rufus 4.6.2208 and earlier versions allows an attacker loading and executing a malicious DLL with escalated privileges (since the executable has been granted higher privileges during the time of launch) due to the ability to inject a malicious `cfgmgr32.dll` in the same directory as the executable and have it side load automatically. This is fixed in commit `74dfa49`, which will be part of version 4.7. Users are advised to upgrade as soon as version 4.7 becomes available. There are no known workarounds for this vulnerability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
@InvestWolf @galenciaba Não querendo provar que estou certo (mas sim estive), segue aí uma probleminha com o Rufus...eu falo, ferramenta assim, closed ou open-source, atua num nível tão baixo que é foco de exploração de hackers. CVE-2025-26624
Post summary
The post identifies CVE-2025-26624 but provides no details, proof of concept, exploit code, patch information, or evidence of active exploitation.