CVE-2026-57239

Foxit PDF Editor/Reader Local Privilege Escalation

The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate their privileges to NT AUTHORITY\SYSTEM.

Affected

Foxit Software Inc. · Foxit PDF Editor · Foxit PDF Reader

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v3.1 CNA

8.2 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

EPSS

0.17% chance of exploitation in the next 30 days, 6th percentile

Published

2026-07-08

Updated

2026-07-09

Proof-of-concept exploits (1)

• Paradoxis/CVE-2026-5723916★ · 2026-07-27

Security advisories

• https://www.foxit.com/support/security-bulletins.html

References

• CVE Record
• NVD entry

Related

• CVE-2026-3775
• CVE-2026-3780