CVE-2026-3780 in Foxit PDF Reader
要約 (英語)
The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing a local attacker to place malicious binaries with the same names and have them loaded or executed instead of the legitimate system files, resulting in local privilege escalation.
責任者
Foxit
予約する
2026年03月08日
公開
2026年04月01日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 354530 | Foxit PDF Reader/PDF Editor 特権昇格 | 426 | 未定義 | 未定義 | CVE-2026-3780 |