PT-2024-22698
CVE-2024-29072
·
Published
2024-05-28
·
Updated
2025-08-22
Description by
CVSS 3.1
8.2
HighMetricsAV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Foxit Reader version 2024.2.0.25138
Description
A privilege escalation issue exists due to improper certification validation of the updater executable before executing it. This allows a low privilege user to trigger the update action, potentially resulting in unexpected elevation of privilege.
Recommendations
For Foxit Reader version 2024.2.0.25138, consider disabling the updater executable until a patch is available to prevent potential exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾