Rakuten Kobo Inc. vulnerabilities
Published CVEs affecting Rakuten Kobo Inc. products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-68955
High · 7.8
CWE-427 Sep 14, 2026
Uncontrolled Search Path Element in Rakuten Kobo Inc. The installer for Rakuten Kobo Desktop Application (Windows version)
The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privileges of the user who performed the installation.