Local Privilege Escalation Vulnerability in PDF-XChange Editor by TrackerUpdate

CVE-2026-2040

What is CVE-2026-2040?

The PDF-XChange Editor is affected by a local privilege escalation vulnerability due to an insecure path in its TrackerUpdate process. An attacker with access to execute low-privileged code can exploit this vulnerability to escalate their privileges. By loading a library from an unsecured location, the attacker can execute arbitrary code in the context of the target user. This type of vulnerability poses significant risks, as it can lead to unauthorized access and control over the system.

References