A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system permissions are assigned to resources used by the update service. A local attacker with low privileges could modify or replace these resources, which are later executed by the service, resulting in execution of arbitrary code with SYSTEM privileges.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.foxit.com/support/security-bulletins.html |
|
History
Fri, 19 Dec 2025 02:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system permissions are assigned to resources used by the update service. A local attacker with low privileges could modify or replace these resources, which are later executed by the service, resulting in execution of arbitrary code with SYSTEM privileges. | |
| Title | Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability | |
| Weaknesses | CWE-732 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Foxit
Published:
Updated: 2025-12-19T07:06:53.212Z
Reserved: 2025-12-03T01:32:27.232Z
Link: CVE-2025-13941
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-12-19T02:16:04.493
Modified: 2025-12-19T02:16:04.493
Link: CVE-2025-13941
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses