Skip to main content

Pdf Architect EUVDEUVD-2026-79135

| CVE-2026-92180 HIGH
Uncontrolled Search Path Element (CWE-427)
2026-09-15 zdi GHSA-5whf-f6fj-76rg
Privilege Escalation Pdf Architect
7.8
CVSS 3.0 · Vendor: zdi
Share

Severity by source

Vendor (zdi) PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (zdi) · only source for this CVE.

CVSS VectorVendor: zdi

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Sep 15, 2026 - 18:50 vuln.today
CVE Published
Sep 15, 2026 - 18:05 cve.org
HIGH 7.8

DescriptionCVE.org

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the activation-service process. The product loads a library from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-29536.

AnalysisAI

Local privilege escalation in pdfforge PDF Architect allows an attacker who already holds low-privileged code execution on a Windows host to hijack a library loaded by the product's activation-service (Update Service) process and run code as SYSTEM. The flaw is an uncontrolled search path element (CWE-427) in which the service resolves a DLL from a location an unprivileged user can write to, so no remote vector or user interaction is required once the foothold exists. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Pdf Architect

View all
CVE-2018-19150 HIGH POC
7.8 Nov 10

Memory corruption in PDMODELProvidePDModelHFT in pdmodel.dll in pdfforge PDF Architect 6 allows remote attackers to caus
CVE-2026-92176 HIGH
7.8 Sep 15

An out-of-bounds read in the App object handling of pdfforge's PDF Architect allows an attacker to execute arbitrary cod
CVE-2026-92177 HIGH
7.8 Sep 15

Opening a crafted PDF file in pdfforge PDF Architect can drive an out-of-bounds heap write inside the application's PDF

CVE-2026-92178 HIGH
7.8 Sep 15

Memory corruption in the PDF parsing routine of pdfforge PDF Architect lets an attacker execute arbitrary code in the co
CVE-2026-92179 HIGH
7.8 Sep 15

Remote attackers can achieve arbitrary code execution by luring a user into opening a maliciously crafted PDF document i

Same weakness CWE-427 – Uncontrolled Search Path Element

View all
CVE-2020-3153 MEDIUM POC
6.5
CVE-2020-3433 HIGH POC
7.8
CVE-2017-6517 CRITICAL POC
9.8
CVE-2020-27955 CRITICAL POC
9.8
CVE-2024-48990 HIGH POC
7.8
CVE-2022-2334 HIGH POC
7.2
CVE-2024-23054 CRITICAL POC
9.8
CVE-2023-31543 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2024-9474 MEDIUM POC
6.9
CVE-2017-5689 CRITICAL POC
9.8
CVE-2021-20021 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8

Share

EUVD-2026-79135 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy