Vulnerabilities

TI-2026-19329 CVE-2026-23988

Rufus has Local Privilege Escalation via TOCTOU Race Condition in Fido Script Handling

HIGH 67

Rufus is a utility that helps format and create bootable USB flash drives.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00206 Published 2026-01-22 Fixed in 4.12_BETA CWE-367

TI-2019-15978 CVE-2019-1010101 · GHSA-q8qc-66ph-9f73

Incorrect permission assignment in Akeo Consulting Rufus

MEDIUM 48

Akeo Consulting Rufus 3.0 and earlier is affected by: Insecure Permissions.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03424 Published 2019-07-19 No fix listed CWE-732

TI-2019-15977 CVE-2019-1010100 · GHSA-v89q-99gq-qmgr

Untrusted search path in Akeo Consulting Rufus

LOW 37

Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01331 Published 2019-07-19 No fix listed CWE-426

TI-2017-09722 CVE-2017-13083 · GHSA-rmwh-8jrh-hc23

Improper certificate validation in Akeo Consulting Rufus

LOW 37

Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.00963 Published 2017-10-18 Fixed in 2.17.1187 CWE-295

Vulnerabilities

Filters

Rufus has Local Privilege Escalation via TOCTOU Race Condition in Fido Script Handling

Incorrect permission assignment in Akeo Consulting Rufus

Untrusted search path in Akeo Consulting Rufus

Improper certificate validation in Akeo Consulting Rufus