CVE-2022-43310
published 2022-11-09CVE-2022-43310: An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL…
PriorityP337high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.61%
75.8th percentile
An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| foxitsoftware | foxit_reader | < 11.2.118.51569 | 11.2.118.51569 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Foxit Reader 11.2.118.51569 uncontrolled search path (EUVD-2022-46350)
vuldb·2026-09-08·CVSS 7.8
CVE-2022-43310 [HIGH] Foxit Reader 11.2.118.51569 uncontrolled search path (EUVD-2022-46350)
A vulnerability categorized as critical has been discovered in Foxit Reader 11.2.118.51569. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled search path.
This vulnerability is registered as CVE-2022-43310. It is possible to launch the attack remotely. No exploit is available.
GHSA
GHSA-v33q-grx6-58x9: An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11
ghsa_unreviewed·2022-11-10
CVE-2022-43310 [HIGH] CWE-427 GHSA-v33q-grx6-58x9: An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11
An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/hxxt9049/futinghttps://www.foxitsoftware.cn/support/security-bulletins.htmlhttps://www.foxitsoftware.com/support/security-bulletins.phphttps://github.com/hxxt9049/futinghttps://www.foxitsoftware.cn/support/security-bulletins.htmlhttps://www.foxitsoftware.com/support/security-bulletins.php
2022-11-09
Published