CVE-2026-57239

Analyzed Analyzed - Analysis Complete

Privilege Escalation via User-Controllable Executables

Publication date: 2026-07-08

Last updated on: 2026-07-09

Assigner: Foxit

Description

The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate their privileges to NT AUTHORITY\SYSTEM.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-08

Last Modified

2026-07-09

Generated

2026-07-28

AI Q&A

2026-07-08

EPSS Evaluated

2026-07-27

NVD

CVE-2026-57239

EUVD

EUVD-2026-42184

Affected Vendors & Products

Vendor	Product	Version / Range
foxit	pdf_editor	From 2023.1.0.15510 (inc) to 2023.3.0.23028 (inc)
foxit	pdf_editor	From 2024.1.0.23997 (inc) to 2024.4.1.27687 (inc)
foxit	pdf_editor	From 2025.1.0.27937 (inc) to 2025.3.0.35737 (inc)
foxit	pdf_editor	From 2026.1.0.36452 (inc) to 2026.1.1.36485 (inc)
foxit	pdf_reader	to 2026.1.1.36485 (inc)
foxit	pdf_editor	to 13.2.4.24048 (inc)
foxit	pdf_editor	From 14.0.0.33046 (inc) to 14.0.4.33508 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability occurs because user-controllable executable files are directly executed by high-privilege processes. This allows low-privilege users to exploit this behavior to elevate their privileges to the highest system level, NT AUTHORITY\SYSTEM.

Impact Analysis

The impact of this vulnerability is that an attacker with low privileges can gain full system control by elevating their privileges to NT AUTHORITY\SYSTEM. This can lead to unauthorized access, modification, or disruption of system resources and data.

Compliance Impact

The vulnerability allows low-privilege users to elevate their privileges to NT AUTHORITY\SYSTEM by executing user-controllable executable files through high-privilege processes. This privilege escalation can lead to unauthorized access to sensitive data or system controls.

Such unauthorized access and potential data exposure or manipulation could negatively impact compliance with common standards and regulations like GDPR and HIPAA, which require strict controls on data access and protection of sensitive information.

Mitigation Strategies

To mitigate this vulnerability, users are advised to update their Foxit PDF Reader and Editor applications to the latest versions.

The updates can be obtained through the application's built-in update feature or by downloading the latest versions from the Foxit website.

Hi! I’m here to help you understand CVE-2026-57239. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70