ZDI-CAN-28595 HIGH 7.8 Upcoming Dec 31, 2025

Foxit

Foxit is a well-known software company specializing in PDF readers and document management solutions. This high-severity vulnerability (CVSS 7.8) requires local access and low-level user privileges to exploit, with no user interaction needed, potentially allowing an attacker to compromise confidentiality, integrity, and availability of the affected system. Security teams should monitor for any patches released by Foxit after their April 30, 2026 deadline and prioritize updates for systems where local users have access to Foxit products.

Advisory Details
Researcher Discovered by: Erik Egsgard of Field Effect
Reported December 31, 2025
Deadline April 30, 2026 13d
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy