PT-2024-22698

CVE-2024-29072

·

Published

2024-05-28

·

Updated

2025-08-22

Description by

CVSS 3.1
8.2
High
MetricsAV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Foxit Reader version 2024.2.0.25138
Description A privilege escalation issue exists due to improper certification validation of the updater executable before executing it. This allows a low privilege user to trigger the update action, potentially resulting in unexpected elevation of privilege.
Recommendations For Foxit Reader version 2024.2.0.25138, consider disabling the updater executable until a patch is available to prevent potential exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾