What’s Vulnerable › Vulnerabilities

CVE-2024-29072

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-05-28 · updated 2026-06-17
• Weakness: CWE-295

Description

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege.

Affected products

• Foxit PDF Reader: through 11.2.9.53938; from 12.0.0 through 12.1.6.15509; from 13.0.0 through 13.1.1.22432; from 2023.1.0.15510 through 2023.3.0.23028; from 2024.1.0.23997 through 2024.2.1.25153
• Foxit Pdf Reader: through 2024.2.1.25153

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1989
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1989
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1989
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1989

Get alerted when CVE-2024-29072 or the next vulnerability affects your stack