Local Privilege Escalation Vulnerability in Foxit PDF Reader Update Service
CVE-2025-9330

7.8HIGH

Key Information:

Vendor

Foxit
Status
PDF Reader
Vendor
CVE Published:
2 September 2025

What is CVE-2025-9330?

The Foxit PDF Reader Update Service contains a local privilege escalation vulnerability due to its insecure loading of libraries. An attacker who can execute low-privileged code on the affected system can exploit this vulnerability to escalate their privileges, allowing them to execute arbitrary code with SYSTEM-level privileges. It is crucial for users to update their Foxit PDF Reader to mitigate this security risk.

Affected Version(s)

PDF Reader 2025.1.0.27937

References

https://www.zerodayinitiative.com/advisories/ZDI-25-870/
x_research-advisory
https://www.foxit.com/support/security-bulletins.html
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.