Lucene search
+L

472 matches found

Zero Day Initiative
Zero Day Initiative
•added 2026/04/02 12:00 a.m.•20 views

Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Foxit Reader...

7.8CVSS6.1AI score0.00191EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/04/01 3:31 a.m.•23 views

EUVD-2026-17751

The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not strictly restricted to trusted system locations. Because these libraries may be resolved and loaded from user‑writab...

7.8CVSS6AI score0.00191EPSS
SaveExploits1References2
NVD
NVD
•added 2026/04/01 2:16 a.m.•12 views

CVE-2026-3775

The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not strictly restricted to trusted system locations. Because these libraries may be resolved and loaded from user‑writab...

7.8CVSS0.00191EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/01 1:40 a.m.•111 views

CVE-2026-3775

CVE-2026-3775 affects Foxit PDF Editor/Reader (update service) and is due to the update check loading system libraries from a path that includes user-writable directories, not restricted to trusted system locations. This allows a local attacker with low privileges to place a malicious library tha...

7.8CVSS7.9AI score0.00191EPSS
SaveExploits1References1Affected Software2
Cvelist
Cvelist
•added 2026/04/01 1:40 a.m.•46 views

CVE-2026-3775 Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not strictly restricted to trusted system locations. Because these libraries may be resolved and loaded from user‑writab...

7.8CVSS0.00191EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/04/01 1:40 a.m.•15 views

CVE-2026-3775

The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not strictly restricted to trusted system locations. Because these libraries may be resolved and loaded from user‑writab...

7.8CVSS6AI score0.00191EPSS
SaveExploits1References2Affected Software2
Positive Technologies
Positive Technologies
•added 2026/04/01 12:00 a.m.•28 views

PT-2026-29435

Name of the Vulnerable Software and Affected Versions The application affected versions not specified Description The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low-privileged users and is not...

7.8CVSS6AI score0.00191EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/01 12:00 a.m.•1 views

CVE-2026-3775: Uncontrolled Search Path Element

The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not strictly restricted to trusted system locations. Because these libraries may be resolved and loaded from user‑writab...

7.8CVSS8AI score0.00191EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2026/03/02 5:57 a.m.•16 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

10CVSS8AI score0.0069EPSS
SaveExploits3References39
RedhatCVE
RedhatCVE
•added 2026/02/25 10:19 p.m.•13 views

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

8.8CVSS5.5AI score0.00105EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/25 10:19 p.m.•14 views

CVE-2025-1787

Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege...

8.8CVSS5.4AI score0.00105EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/24 8:27 p.m.•12 views

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

7.8CVSS5.8AI score0.00105EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/24 8:27 p.m.•20 views

CVE-2025-1787

Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege...

4.2CVSS5.8AI score0.0009EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/24 8:27 p.m.•18 views

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

8.8CVSS0.00105EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/24 8:27 p.m.•17 views

CVE-2025-1787

Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege...

8.8CVSS0.0009EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/24 6:47 p.m.•8 views

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

8.8CVSS5.9AI score0.00105EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/02/24 6:47 p.m.•38 views

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

8.8CVSS0.00105EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/24 6:47 p.m.•8 views

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

8.8CVSS5.9AI score0.00105EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/24 6:47 p.m.•53 views

CVE-2025-1789

CVE-2025-1789 affects the Genetec Update Service on Windows, enabling local privilege escalation. An authenticated, low-privileged user could exploit this to gain elevated privileges on the affected system. Related Red Hat advisories describe a potential path to privilege escalation and condition...

8.8CVSS5.9AI score0.00105EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/24 6:44 p.m.•8 views

CVE-2025-1787

Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege...

8.8CVSS5.7AI score0.0009EPSS
SaveExploits0References1
Rows per page
Query Builder