High severity8.2NVD Advisory· Published May 28, 2024· Updated Jun 17, 2026

CVE-2024-29072

Description

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Foxitsoftware/Foxit Reader Plugincpe-rescue
Range: 2024.2.0.25138
Foxitsoftware/Readerllm-create
Range: 2024.2.0.25138
Foxitsoftware/PDF Editor
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
Range: <=11.2.9.53938
Foxitsoftware/PDF Reader
cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
Range: <=2024.2.1.25153

Patches

Vulnerability mechanics

References

talosintelligence.com/vulnerability_reports/TALOS-2024-1989nvdExploitThird Party Advisory
www.talosintelligence.com/vulnerability_reports/TALOS-2024-1989nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000