Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2026-3775— Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVSS 7.8 · High EPSS 0.02% · P4
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-3775

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged users and is not strictly restricted to trusted system locations. Because these libraries may be resolved and loaded from user‑writable locations, a local attacker can place a malicious library there and have it loaded with SYSTEM privileges, resulting in local privilege escalation and arbitrary code execution.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
对搜索路径元素未加控制
Source: NVD (National Vulnerability Database)
Vulnerability Title
Foxit PDF Reader和Foxit PDF Editor 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Foxit PDF Reader和Foxit PDF Editor都是中国福昕（Foxit）公司的产品。Foxit PDF Reader是一款PDF阅读器。Foxit PDF Editor是一款PDF编辑器。 Foxit PDF Reader和Foxit PDF Editor存在安全漏洞，该漏洞源于更新服务在检查更新时从包含低权限用户可写目录的搜索路径加载系统库，可能导致本地攻击者放置恶意库并以SYSTEM权限加载，引发本地权限提升和任意代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
Foxit Software Inc.Foxit PDF Editor Versions 2025.3 and earlier -
Foxit Software Inc.Foxit PDF Reader Versions 2025.3 and earlier -

II. Public POCs for CVE-2026-3775

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-3775

Please Login to view more intelligence information

Same Patch Batch · Foxit Software Inc. · 2026-04-01 · 8 CVEs total

CVE-2026-37797.8 HIGHFoxit PDF Editor/Reader List Box Calculate Array Use-After-Free Vulnerability
CVE-2026-37807.3 HIGHFoxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege Escalation
CVE-2026-49477.1 HIGHInsecure Direct Object Reference (IDOR) Leading to Signature Forgery in Foxit eSign
CVE-2026-37786.2 MEDIUMStack exhaustion caused by cyclic references in Foxit PDF Editor/Reader
CVE-2026-37765.5 MEDIUMNull pointer dereference in Foxit PDF Editor/Reader when accessing stamp annotation
CVE-2026-37775.5 MEDIUMUse after free of view cache in Foxit PDF Editor/Reader
CVE-2026-37744.7 MEDIUMSelf-Modifications Affecting Altered Printing and Redaction in Foxit PDF Editor

IV. Related Vulnerabilities

Same product: Foxit PDF Editor
Same vendor: Foxit Software Inc.
Same weakness: CWE-427

V. Comments for CVE-2026-3775

No comments yet

Leave a comment