CVE-2026-3780 Foxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege Escalation
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | Exploit for Uncontrolled Search Path Element in Foxit Pdf_Editor | 8 Jul 202613:47 | – | githubexploit |
 | CVE-2026-3780 | 1 Apr 202601:40 | – | attackerkb |
 | The vulnerability affects the update service for PDF document viewing software called Foxit PDF Reader (previously Foxit Reader) and the PDF file editing software called Foxit PDF Editor (previously Foxit PhantomPDF). This vulnerability allows attackers to escalate their privileges and execute arbitrary code. | 28 Jul 202600:00 | – | bdu_fstec |
 | CVE-2026-3780 | 30 Mar 202617:00 | – | circl |
 | Foxit PDF Reader和Foxit PDF Editor 安全漏洞 | 1 Apr 202600:00 | – | cnnvd |
 | CVE-2026-3780 | 1 Apr 202601:40 | – | cve |
 | EUVD-2026-17761 | 1 Apr 202603:31 | – | euvd |
 | Foxit PDF Editor < 14.0.3 Multiple Vulnerabilities | 31 Mar 202600:00 | – | nessus |
| Foxit PDF Editor < 2026.1 Multiple Vulnerabilities | 31 Mar 202600:00 | – | nessus |
| Foxit PDF Reader < 2026.1 Multiple Vulnerabilities | 31 Mar 202600:00 | – | nessus |
10
[
{
"vendor": "Foxit Software Inc.",
"product": "Foxit PDF Reader",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "Versions 2025.3 and earlier"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Foxit Software Inc.",
"product": "Foxit PDF Editor",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "Versions 2025.3 and earlier"
},
{
"status": "affected",
"version": "Versions 14.0.2 and earlier"
}
],
"defaultStatus": "unaffected"
}
]| Source | Link |
|---|---|
| foxit | www.foxit.com/support/security-bulletins.html |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
02 Apr 2026 02:14Current
CVSS 3.17.3
EPSS0.00121