Description
The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not strictly restricted to trusted system locations. Because these libraries may be resolved and loaded from user‑writable locations, a local attacker can place a malicious library there and have it loaded with SYSTEM privileges, resulting in local privilege escalation and arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Foxit Software | Foxit PDF Editor | Versions 2025.3 and earlier | — |
| Foxit Software | Foxit PDF Reader | Versions 2025.3 and earlier | — |
Advisories 1
- WID-SEC-2026-0934 Foxit PDF Editor und Reader: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 6, 2026