CVE-2024-32488

2024-04-1506:15:07

[email protected]

web.nvd.nist.gov

foxit pdf reader

local privilege escalation

update service

crafted dll

weak permissions

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there.

References

www.foxit.com/support/security-bulletins.html