ZDI-26-742: Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability
FoxitUpdater race condition CVE-2026-91813 lets a local low-privileged attacker escalate privileges on Foxit PDF Reader.
ZDI-26-742 discloses a race condition in Foxit PDF Reader's FoxitUpdater that allows local privilege escalation. An attacker must already be able to run low-privileged code on the target. ZDI assigned CVSS 7.8 and CVE-2026-91813. No in-the-wild exploitation is reported.
- Race condition is in the FoxitUpdater component.
- An attacker already needs low-privileged local code execution.
- Successful exploitation escalates privileges on the system.
- CVE-2026-91813 is rated CVSS 7.8; no wild exploitation reported.
- CVEs
- CVE-2026-91813
- Vendors
- Foxit
- Products
- Foxit PDF ReaderFoxitUpdater
- Organizations
- Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-91813 | Local RCE in Foxit PDF Editor/Reader Update Mechanism 5.0+ (CVE-2026-91813) | 7.8 | — |
From the original article
This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.