Privilege escalation in Foxit PDF Reader for Windows and Foxit PDF Editor (formerly Foxit PhantomPDF) - #VU1032

Vulnerability identifier: #VU1032

CSH Severity: High

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to obtain elevated privileges on the target system.
The vulnerability exists due to weak file permissions that lets attacker to elevate his privileges and access the system.
Successful exploitation of this vulnerability may result in arbitrary code execution on the vulnerable system.

Foxit PDF Reader for Windows
Foxit PDF Editor (formerly Foxit PhantomPDF)

Update Foxit Reader to version 8.1.
Update Foxit PhantomPDF to version 8.1.

• https://www.foxitsoftware.com/support/security-bulletins.php

• Multiple vulnerabilities in Foxit Reader and PhantomPDF