CVE-2026-3780 in Foxit PDF Reader

Résumé (Anglaise)

The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing a local attacker to place malicious binaries with the same names and have them loaded or executed instead of the legitimate system files, resulting in local privilege escalation.

Responsable

Foxit

Réserver

08/03/2026

Divulgation

01/04/2026

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
354530	Foxit PDF Reader/PDF Editor élévation de privilèges	426	Non défini	Non défini	CVE-2026-3780