high7.5
CVE-2026-30332
A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalate privileges and e…
Impact
A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalate privileges and execute arbitrary code via replacing a legitimate script with a crafted payload during the flashing process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Balena | Balena Etcher For Windows | before 2.1.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.