CVEvulnerability
CVE-2022-43310
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-11-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-427
Description
An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.
Affected configurations
• foxitsoftware foxit reader (< 11.2.118.51569)
Related
Weakness · CWE (1)
- CWE-427 Uncontrolled Search Path Element weakness
References
- https://github.com/hxxt9049/futing Third Party Advisory
- https://www.foxitsoftware.cn/support/security-bulletins.html Vendor Advisory
- https://www.foxitsoftware.com/support/security-bulletins.php Not Applicable, Vendor Advisory
- https://github.com/hxxt9049/futing Third Party Advisory
- https://www.foxitsoftware.cn/support/security-bulletins.html Vendor Advisory
- https://www.foxitsoftware.com/support/security-bulletins.php Not Applicable, Vendor Advisory