Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-3502 1 Trueconf 1 Trueconf 2026-04-03 7.8 High
TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.
CVE-2022-46763 2 Microsoft, Trueconf 2 Windows, Server 2026-02-10 8.8 High
A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code.