CVE-2026-91803

Summary

The flaw allows a local attacker to escalate privileges by exploiting an unsafe loading of dynamic-link libraries in the Foxit PDF Editor/Reader updater, enabling code execution with elevated permissions.

Exploitability

Exploitation requires local access and knowledge of the affected directory. The attacker must have write permissions to the user-writable directory.

Blast radius

If exploited, the attacker could gain full control over the system, leading to potential data loss, unauthorized access, and further exploitation.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the latest version of Foxit PDF Editor/Reader, ensuring it is patched against this vulnerability.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.