Privilege Escalation Vulnerability in Foxit Reader

CVE-2024-29072

What is CVE-2024-29072?

A privilege escalation vulnerability exists in Foxit Reader due to improper validation of the updater executable's certification. This security flaw allows a low privilege user to initiate the update process, potentially leading to unauthorized elevation of privileges. It's crucial for users of Foxit Reader 2024.2.0.25138 and earlier versions to be aware of this issue and consider updating their software to mitigate the risks associated with this vulnerability.

References