Yüksek CVSS 8.8
CVE-2026-91798: Pdf Editor: hatalı izin ataması
Açıklama (NVD)
A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges.
Özet bilgiler
- Ürün
- Foxit Pdf Editor
- CVSS v3.1
- 8.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - EPSS
- %0,15 (yüzdelik 4)
- CWE
- CWE-732
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| foxit-pdf-editor | — | 13.2.6.24111 | — |
| foxit-pdf-editor | 14.0.0.33046 | 14.0.7.33751 | — |
| foxit-pdf-editor | 2023.1.0.15510 | 2023.3.0.23028 | — |
| foxit-pdf-editor | 2024.1.0.23997 | 2024.4.1.27687 | — |
| foxit-pdf-editor | 2025.1.0.27937 | 2025.3.0.35737 | — |
| foxit-pdf-editor | 2026.1.0.36452 | 2026.2.0.39747 | — |
| foxit-pdf-reader | — | 2026.2.0.39747 | — |
| foxit-pdf-editor | — | 13.2.6.63484 | — |
| foxit-pdf-editor | 14.0.0.68868 | 14.0.7.69441 | — |
| foxit-pdf-editor | 2023.1.0.55583 | 2023.3.0.63083 | — |
| foxit-pdf-editor | 2024.1.0.63682 | 2024.4.1.66479 | — |
| foxit-pdf-editor | 2025.1.0.66692 | 2025.3.0.69570 | — |
| foxit-pdf-editor | 2026.1.0.70169 | 2026.2.0.72029 | — |
| foxit-pdf-reader | — | 2026.2.0.72029 | — |