CVE-2026-3502
TrueConf Client Download of Code Without Integrity Check Vulnerability
⚠ KEVEPSS 5.8%
描述
TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.
如何修補 CVE-2026-3502
OSV 沒有提供套件對應 — 請參考下方連結尋找廠商提供的建議。
CVE-2026-3502 正在被利用嗎?
是 — CVE-2026-3502 已列入 CISA Known Exploited Vulnerabilities (KEV) 清單,代表正在被實際利用,請立即修補。
受影響套件(0)
OSV 沒有提供套件對應。