What’s Vulnerable › Vulnerabilities
CVE-2026-3775: Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-04-01 · updated 2026-06-17
- Weakness: CWE-427
Description
The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not strictly restricted to trusted system locations. Because these libraries may be resolved and loaded from user‑writable locations, a local attacker can place a malicious library there and have it loaded with SYSTEM privileges, resulting in local privilege escalation and arbitrary code execution.
Affected products
- Foxit PDF Reader: through 13.2.2.24014; from 14.0.0.33046 through 14.0.2.33402; from 2023.1.0.15510 through 2023.3.0.23028; from 2024.1.0.23997 through 2024.4.1.27687; from 2025.1.0.27937 through 2025.3.0.35737
- Foxit Pdf Reader: through 2025.3.0.35737
References
Get alerted when CVE-2026-3775 or the next vulnerability affects your stack