PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

PDF-XChange Editor contains a local privilege escalation vulnerability (CVE-2026-2040) rated as HIGH severity with a CVSS score of 7.3. An attacker who already has low-privileged code execution on a system can exploit this flaw to gain elevated privileges. Security teams should prioritize patching PDF-XChange Editor and implement application whitelisting or execution controls to prevent low-privileged code execution, which is required as the initial attack vector.