CVEvulnerability

CVE-2023-33240

7.8 HIGH Published 2023-05-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-276

Description

Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and 10.1.11.37866 and earlier) on Windows allows Local Privilege Escalation when installed to a non-default directory because unprivileged users have access to an executable file of a system service. This is fixed in 12.1.2.

Affected configurations

• foxit pdf editor (<= 10.1.11.37866) • foxit pdf editor (>= 11.0.0 <= 11.2.5.53785) • foxit pdf editor (>= 12.0.0 <= 12.1.1.15289) • foxit pdf reader (<= 12.1.1.15289)

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References