ZDI-CAN-28595: ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Published Apr 2, 2026

Updated

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-3775.

Affected Software

1 affected component

Foxit Foxit PDF Reader

Event History

Apr 2, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-28595?

The severity of ZDI-CAN-28595 is considered high due to its potential for local privilege escalation.

How do I fix ZDI-CAN-28595?

To fix ZDI-CAN-28595, update your Foxit PDF Reader to the latest version provided by Foxit Software.

Who is affected by ZDI-CAN-28595?

ZDI-CAN-28595 affects installations of Foxit PDF Reader that have not been updated to address the vulnerability.

What type of vulnerability is ZDI-CAN-28595?

ZDI-CAN-28595 is classified as an uncontrolled search path element vulnerability that allows privilege escalation.

What are the implications of ZDI-CAN-28595 for users?

Users of affected versions of Foxit PDF Reader may be vulnerable to attacks that can allow local privilege escalation.