ZDI-CAN-28595
HIGH 7.8
Upcoming
Dec 31, 2025
Foxit
Foxit is a well-known software company specializing in PDF readers and document management solutions. This high-severity vulnerability (CVSS 7.8) requires local access and low-level user privileges to exploit, with no user interaction needed, potentially allowing an attacker to compromise confidentiality, integrity, and availability of the affected system. Security teams should monitor for any patches released by Foxit after their April 30, 2026 deadline and prioritize updates for systems where local users have access to Foxit products.
Advisory Details
Researcher
Discovered by:
Erik Egsgard of Field Effect
Reported
December 31, 2025
Deadline
April 30, 2026
13d
CVSS Vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H