Insecure DLL Loading in Rakuten Kobo Desktop Application for Windows
CVE-2026-68955

8.4HIGH

Key Information:

Vendor

Rakuten Kobo Inc.

Status
The Installer For Rakuten Kobo Desktop Application (windows Version)
Vendor
CVE Published:
14 September 2026

What is CVE-2026-68955?

The Rakuten Kobo Desktop Application for Windows presents a security concern where the installer can be manipulated to load malicious Dynamic Link Libraries (DLLs). If a specially crafted DLL exists in the same directory as the installer, it may be executed with the user's privileges during installation, potentially allowing attackers to run arbitrary code on the affected system.

Affected Version(s)

The installer for Rakuten Kobo Desktop Application (Windows version) Versions distributed before 2026-07-15.

References

https://help.kobo.com/hc/en-us/articles/42294089837463-Se...
https://jvn.jp/en/jp/JVN18593874/

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.