CVE-2024-29072
A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege.
| Software | From | Fixed in |
|---|---|---|
| foxit / pdf_editor | - | 11.2.9.53938.x |
| foxit / pdf_editor | 12.0.0 | 12.1.6.15509.x |
| foxit / pdf_editor | 13.0.0 | 13.1.1.22432.x |
| foxit / pdf_editor | 2023.1.0.15510 | 2023.3.0.23028.x |
| foxit / pdf_editor | 2024.1.0.23997 | 2024.2.1.25153.x |
| foxit / pdf_reader | - | 2024.2.1.25153.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime