Lucene search
+L

CVE-2026-3780 Foxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege Escalation

🗓️ 01 Apr 2026 01:40:33Reported by FoxitType 
cvelist
 cvelist
🔗 www.cve.org👁 53 Views

Foxit installer runs elevated and uses untrusted search paths for system files, enabling local privilege escalation.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Uncontrolled Search Path Element in Foxit Pdf_Editor
8 Jul 202613:47
–githubexploit
attackerkb
attackerkb
CVE-2026-3780
1 Apr 202601:40
–attackerkb
bdu_fstec
BDU FSTEC
Foxit PDF Reader PDF Editor Code Execution
28 Jul 202600:00
–bdu_fstec
circl
Circl
CVE-2026-3780
30 Mar 202617:00
–circl
cnnvd
CNNVD
Foxit PDF Reader and Foxit PDF Editor security vulnerabilities
1 Apr 202600:00
–cnnvd
cve
CVE
CVE-2026-3780
1 Apr 202601:40
–cve
euvd
EUVD
EUVD-2026-17761
1 Apr 202603:31
–euvd
nessus
Tenable Nessus
Foxit PDF Editor < 14.0.3 Multiple Vulnerabilities
31 Mar 202600:00
–nessus
nessus
Tenable Nessus
Foxit PDF Editor < 2026.1 Multiple Vulnerabilities
31 Mar 202600:00
–nessus
nessus
Tenable Nessus
Foxit PDF Reader < 2026.1 Multiple Vulnerabilities
31 Mar 202600:00
–nessus
Rows per page
[
  {
    "vendor": "Foxit Software Inc.",
    "product": "Foxit PDF Reader",
    "platforms": [
      "Windows"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2025.3 and earlier"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Foxit Software Inc.",
    "product": "Foxit PDF Editor",
    "platforms": [
      "Windows"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2025.3 and earlier"
      },
      {
        "status": "affected",
        "version": "Versions 14.0.2 and earlier"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 Apr 2026 02:14Current
CVSS 3.17.3
EPSS0.00121
SSVC
53