UNKNOWNCVE-2026-3775

Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Platform

windows

Component

foxit-pdf-editor-reader-update-service

The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not strictly restricted to trusted system locations. Because these libraries may be resolved and loaded from user‑writable locations, a local attacker can place a malicious library there and have it loaded with SYSTEM privileges, resulting in local privilege escalation and arbitrary code execution.

How to fix

Actualice Foxit PDF Editor/Reader a una versión posterior a la 2025.3. Consulte el boletín de seguridad de Foxit para obtener más detalles e instrucciones específicas de actualización.

Monitor your dependencies automatically

Get notified when new vulnerabilities affect your projects. Free forever.

Start free
CVE-2026-3775 — Vulnerability Details | NextGuard | NextGuard