Security Advisory

CVE-2024-29072

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-28 13:52:58
Last updated 2025-02-13 17:47:36
Assigner talos
State PUBLISHED

Description

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege.