UNKNOWNCVE-2026-3775
Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Platform
windows
Component
foxit-pdf-editor-reader-update-service
The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not strictly restricted to trusted system locations. Because these libraries may be resolved and loaded from user‑writable locations, a local attacker can place a malicious library there and have it loaded with SYSTEM privileges, resulting in local privilege escalation and arbitrary code execution.
How to fix
Actualice Foxit PDF Editor/Reader a una versión posterior a la 2025.3. Consulte el boletín de seguridad de Foxit para obtener más detalles e instrucciones específicas de actualización.
Monitor your dependencies automatically
Get notified when new vulnerabilities affect your projects. Free forever.
Start free