Local Privilege Escalation in Foxit Software Update Mechanism

CVE-2026-3775

What is CVE-2026-3775?

The update service in Foxit PDF Reader may inadvertently load system libraries from directories that can be modified by low-privileged users. This vulnerability enables a local attacker to place a malicious library in these writable locations, potentially allowing it to be executed with SYSTEM privileges. The consequence of this issue includes unauthorized local privilege escalation and the ability to execute arbitrary code, which poses significant security risks to the user's system.

References