CVE-2024-29072

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege.

Score

CVSS 3.1 8.2 High

Status

Analyzed - talos-cna@cisco.com

Published

2024-05-28

Last modified

2025-02-13

Weaknesses

CWE-295

Affected products

• Foxit Reader (Foxit)
• Pdf Editor (Foxit)
• Pdf Reader (Foxit)
• Foxit Reader (Foxitsoftware)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1989
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1989