CVE-2026-91803: Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking
A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running the Foxit PDF Editor/Reader updater are exposed where a local attacker can place a malicious DLL in the user-writable directory searched by the updater.
What does an attacker need to exploit it?
The attacker needs local access and low-level privileges sufficient to write a malicious DLL into the affected user-writable directory. No user interaction is required according to the supplied vector.
What is the likely impact of successful exploitation?
Successful exploitation can allow code execution with elevated privileges. The reported impact includes high confidentiality, integrity, and availability effects, with a scope change.