Lucene search
K

CVE-2025-13941

🗓️ 19 Dec 2025 01:51:22Reported by FoxitType 
cve
 cve
🔗 web.nvd.nist.gov👁 8 Views

CVE-2025-13941: Foxit Update Service local privilege escalation from incorrect permissions during plugin install.

Related
Detection
Affected
Refs
NVD
Node
foxitpdf_editorRange13.2.1.23955
OR
foxitpdf_editorRange14.0.0.3304614.0.1.33197
OR
foxitpdf_editorRange2023.1.0.155102023.3.0.23028
OR
foxitpdf_editorRange2024.1.0.239972024.4.1.27687
OR
foxitpdf_editorRange2025.1.0.279372025.2.1.33197
OR
foxitpdf_readerRange2025.2.1.33197
AND
[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Foxit PDF Reader",
    "vendor": "Foxit Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2025.2.1 and earlier"
      },
      {
        "status": "affected",
        "version": "Versions 14.0.1 and earlier"
      },
      {
        "status": "affected",
        "version": "Versions 13.2.1 and eariler"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Foxit PDF Editor",
    "vendor": "Foxit Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2025.2.1 and earlier"
      },
      {
        "status": "affected",
        "version": "Versions 14.0.1 and earlier"
      },
      {
        "status": "affected",
        "version": "Versions 13.2.1 and eariler"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation