Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-91803

Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Foxit

Description

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Foxit Software Inc. Foxit PDF Editor

Default version status: unaffected

  • Versions 2026.2 and earlieraffected
  • Versions 14.0.7 and earlieraffected

Foxit Software Inc. Foxit PDF Reader

Default version status: unaffected

  • Versions 2026.2 and earlieraffected

References