CVE-2024-41605

—

CVSS 3.1

8.4 high

EPSS

<1%p6

Published

Sep 26, 2024 (Sep 26, 2024)

Modified

Jun 17, 2026

Description

In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loading, because the update service lacks integrity validation for the updater. Attacker-controlled code may thus be executed.

Weakness: CWE-284
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.