ZDI-26-742: Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability
FoxitUpdater race condition CVE-2026-91813 lets a local low-privileged attacker escalate privileges on Foxit PDF Reader.
34
CVE-2026-91813
Local RCE in Foxit PDF Editor/Reader Update Mechanism 5.0+ (CVE-2026-91813)
- CVSS 3.1
- 7.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and extraction due to insufficient file locking and integrity validation. This flaw enables local attackers to execute arbitrary code with elevated privileges. The affected product is Foxit PDF Editor/Reader, with no specific version range provided in the data. The exploitation status is currently unknown, as no public exploit has been disclosed.
What to do: Upgrade to the latest version of Foxit PDF Editor/Reader to mitigate the flaw. Implement robust file locking and integrity validation mechanisms to prevent unauthorized updates. Regularly audit and monitor for potential exploitation risks.
| Product | Affected |
|---|---|
| Foxit PDF Editor/Reader | — |
Estimated exposure
nicheNo basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation. This could enable local attackers to execute arbitrary code with elevated privileges.
- Vendors
- foxit
- Products
- pdf editor, pdf reader
- Weakness
- CWE-367
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H