Main
Vulnerability Database
Exploits
ID:12867 - Exploit for Insecure DLL loading in Foxit PDF Editor (formerly Foxit PhantomPDF) and Foxit PDF Reader for Windows - CVE-2026-57239
ID:12867 - Exploit for Insecure DLL loading in Foxit PDF Editor (formerly Foxit PhantomPDF) and Foxit PDF Reader for Windows - CVE-2026-57239
Published: August 6, 2026
Vulnerability identifier: #VU137066
Vulnerability risk: High
CVE-ID: CVE-2026-57239
CWE-ID: CWE-427
Exploitation vector: Remote access
Vulnerable software:
Foxit PDF Editor (formerly Foxit PhantomPDF)
Foxit PDF Reader for Windows
Foxit PDF Editor (formerly Foxit PhantomPDF)
Foxit PDF Reader for Windows
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to escalate privileges.
The vulnerability exists due to uncontrolled search path element in the Foxit update service when checking for updates. A remote attacker can place a malicious DLL file to escalate privileges.
User interaction is required to initiate the update check.
Remediation
Install security update from vendor's website.