Vulnerability details
CVE-2026-3780
Foxit Software Foxit PDF EditorFoxit Software Foxit PDF Reader
Foxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege Escalation
CVSS 3.1
7.3High
Official description
The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing a local attacker to place malicious binaries with the same names and have them loaded or executed instead of the legitimate system files, resulting in local privilege escalation.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.3High | 3.1 | CVEProject cvelistV5 (CNA) (Foxit) | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Foxit Software Inc. | Foxit PDF Editor | Versions 14.0.2 and earlier | CVEProject cvelistV5 (CNA) |
| Foxit Software Inc. | Foxit PDF Editor | Versions 2025.3 and earlier | CVEProject cvelistV5 (CNA) |
| Foxit Software Inc. | Foxit PDF Reader | Versions 2025.3 and earlier | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-04-01
- Last updated
- 2026-04-02
- State
- Published
- Assigner (CNA)
- Foxit
Exploit prediction (EPSS)
0.12%
Probability of exploitation in 30 days
2.3%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-426Untrusted Search Path