{"id":"CVE-2026-91803","published":"2026-09-23T08:17:12.363","lastModified":"2026-09-23T17:58:26.570","description":"A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-427"],"vendors":[],"products":[],"references":[{"url":"https://www.foxit.com/support/security-bulletins.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows a local attacker to escalate privileges by exploiting an unsafe loading of dynamic-link libraries in the Foxit PDF Editor/Reader updater, enabling code execution with elevated permissions.","exploitability":"Exploitation requires local access and knowledge of the affected directory. The attacker must have write permissions to the user-writable directory.","blast_radius":"If exploited, the attacker could gain full control over the system, leading to potential data loss, unauthorized access, and further exploitation.","remediation":"Upgrade to the latest version of Foxit PDF Editor/Reader, ensuring it is patched against this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","local-attack","pdf"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-28T08:56:53.582Z"}}