CVE-2026-91803 — Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking

CVE-2026-91803

Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking PUBLISHED

Description (CNA)

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges.

Affected (CNA)

Vendor / product	Versions
Foxit Software Inc. / Foxit PDF Editor	affected Versions 2026.2 and earlier; affected Versions 14.0.7 and earlier
Foxit Software Inc. / Foxit PDF Reader	affected Versions 2026.2 and earlier

CWE

CWE-427

References

https://www.foxit.com/support/security-bulletins.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.