PT-2026-29440 · Foxitsoftware+1 · Foxit Pdf Editor+4

Kara Zaffarano · Published 2026-04-01 · Updated 2026-04-28 · CVE-2026-3780

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The application's installer operates with elevated privileges but utilizes untrusted search paths to resolve system executables and DLLs. These paths can include directories writable by users, enabling a local attacker to place malicious binaries with identical names. These malicious files can then be loaded or executed in place of legitimate system files, leading to local privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2026-3780

Affected Products

Foxit Pdf Editor

Foxit Pdf Reader

Foxit Reader

Pdf Editor

Pdf Reader

References · 5

• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3780 · Security Note
• https://twitter.com/CVEarity/status/2039304386913169829 · Twitter Post
• https://t.me/cveNotify/161254 · Telegram Post
• https://twitter.com/CVEnew/status/2039279686531137804 · Twitter Post