CVE-2025-63685
CriticalSummary
Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability due to insecure loading of system libraries. The application does not validate the path or signature of regsvr32.exe it loads. An attacker can place a malicious DLL in the startup directory, which will be executed when the user launches the program.
Risk Assessment
Execution of malicious code in the application context, potentially leading to system compromise or data theft.
Recommendation
Update the application to a version that validates the integrity and signatures of loaded libraries, and avoid running the application from untrusted directories.
Original NVD description (English source)
Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems from the insecure loading of system libraries. Specifically, the application does not validate the path or signature of [regsvr32.exe] it loads. An attacker can place a crafted malicious DLL in the application's startup directory, which will be loaded and executed when the user launches the program.