CVE-2023-33240

published 2023-05-19

CVE-2023-33240: Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and…

Priority P3 40 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and 10.1.11.37866 and earlier) on Windows allows Local Privilege Escalation when installed to a non-default directory because unprivileged users have access to an executable file of a system service. This is fixed in 12.1.2.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
foxit	pdf_editor	<= 10.1.11.37866	—
foxit	pdf_editor	11.0.0 – 11.2.5.53785	—
foxit	pdf_editor	12.0.0 – 12.1.1.15289	—
foxit	pdf_reader	<= 12.1.1.15289	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-276