CVE-2026-91813 — Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability
A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file loc…
Published: 2026-09-23 · CVSS: 8.8 · CVSS 3.1
A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation. This could enable local attackers to execute arbitrary code with elevated privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7