Lucene search
+L

CVE-2026-3775 Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

🗓️ 01 Apr 2026 01:40:36Reported by FoxitType 
cvelist
 cvelist
🔗 www.cve.org👁 49 Views

Foxit PDF Editor Update Service loads libraries from user writable paths, enabling local privilege escalation to SYSTEM.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Uncontrolled Search Path Element in Foxit Pdf_Editor
8 Jul 202613:47
–githubexploit
attackerkb
attackerkb
CVE-2026-3775
1 Apr 202601:40
–attackerkb
bdu_fstec
BDU FSTEC
Foxit PDF Reader PDF Editor Code Execution
28 Jul 202600:00
–bdu_fstec
circl
Circl
CVE-2026-3775
30 Mar 202617:00
–circl
cnnvd
CNNVD
Foxit PDF Reader and Foxit PDF Editor security vulnerabilities
1 Apr 202600:00
–cnnvd
cve
CVE
CVE-2026-3775
1 Apr 202601:40
–cve
euvd
EUVD
EUVD-2026-17751
1 Apr 202603:31
–euvd
nessus
Tenable Nessus
Foxit PDF Editor < 2026.1 Multiple Vulnerabilities
31 Mar 202600:00
–nessus
nessus
Tenable Nessus
Foxit PDF Reader < 2026.1 Multiple Vulnerabilities
31 Mar 202600:00
–nessus
kitploit
Kitploit
CVE-2026-57239
24 Oct 202605:07
–kitploit
Rows per page
[
  {
    "vendor": "Foxit Software Inc.",
    "product": "Foxit PDF Editor",
    "platforms": [
      "Windows"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2025.3 and earlier"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Foxit Software Inc.",
    "product": "Foxit PDF Reader",
    "platforms": [
      "Windows"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2025.3 and earlier"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 Apr 2026 02:11Current
CVSS 3.17.8
EPSS0.00191
SSVC
49