Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-68955

The installer for Rakuten Kobo Desktop Application (Windows… · Vulnerability

CVSS 3.0 7.8 HIGHCVSS 4.0 8.4 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-68955

Published

The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privileges of the user who performed the installation.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-68955

Published

The installer for Rakuten Kobo Desktop Application (Windows version)

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Rakuten Kobo Inc.",
                    "product": "The installer for Rakuten Kobo Desktop Application (Windows version)",
                    "versions": [
                        {
                            "version": "Versions distributed before 2026-07-15.",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON