Local Privilege Escalation Vulnerability in Foxit PDF Reader

CVE-2024-12753

Summary

A local privilege escalation vulnerability has been identified in Foxit PDF Reader, which can be exploited by attackers to gain elevated privileges on affected systems. This issue arises from a flaw within the product's installer that can be manipulated by creating a junction. By exploiting this vulnerability, an attacker who has already executed low-privileged code on the target system may achieve arbitrary code execution with SYSTEM-level privileges. Users are advised to ensure their installations are updated to mitigate potential risks associated with this vulnerability.

References