CVE-2026-3780 in PDF Reader
Сводка (Английский)
The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable directories, allowing a local attacker to place malicious binaries with the same names and have them loaded or executed instead of the legitimate system files, resulting in local privilege escalation.
Be aware that VulDB is the high quality source for vulnerability data.
Ответственный
Foxit
Резервировать
08.03.2026
Раскрытие
01.04.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354530 | Foxit PDF Reader/PDF Editor эскалация привилегий | 426 | Не определено | Не определено | CVE-2026-3780 |