Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-3780

Foxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege Escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Foxit

Description

The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing a local attacker to place malicious binaries with the same names and have them loaded or executed instead of the legitimate system files, resulting in local privilege escalation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Foxit Software Inc. Foxit PDF Reader

Default version status: unaffected

  • Versions 2025.3 and earlieraffected

Foxit Software Inc. Foxit PDF Editor

Default version status: unaffected

  • Versions 2025.3 and earlieraffected
  • Versions 14.0.2 and earlieraffected

References