← Back

CVE-2026-57239

nvd nist
Published: Jul 8, 2026Modified: Jul 9, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate their privileges to NT AUTHORITY\SYSTEM.

Affected (7)

Foxit
2 products
Pdf Editor
Pdf Reader
Configuration A
7 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Foxit
Pdf Editor
Up to 13.2.4.24048
Pdf Editor
From 14.0.0.33046 to 14.0.4.33508
Pdf Editor
From 2023.1.0.15510 to 2023.3.0.23028
Pdf Editor
From 2024.1.0.23997 to 2024.4.1.27687
Pdf Editor
From 2025.1.0.27937 to 2025.3.0.35737
Pdf Editor
From 2026.1.0.36452 to 2026.1.1.36485
Pdf Reader
Up to 2026.1.1.36485
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-427
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (1)

Source: 14984358-7092-470d-8f34-ade47a7658a2
Vendor Advisory

Timeline

No history available yet.