Skip to content
OpenAdvisories

Vendor

pbatard

2 known vulnerabilities.

Products

rufus 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-23988

    Rufus has Local Privilege Escalation via TOCTOU Race Condition in Fido Script Handling

    Rufus is a utility that helps format and create bootable USB flash drives. Versions 4.11 and below contain a race condition (TOCTOU) in src/net.c during the creation, validation, and execution of the Fido PowerShell script. Since Rufus runs with elevated priv…

    pbatard rufus