Description
A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Foxit | Foxit Reader | 2024.2.0.25138 | — |
Advisories 1
- WID-SEC-2024-1244 Foxit PDF Editor und PDF Reader: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 28, 2024