CVE-2023-33240 — HIGH (7.8)

Q: How severe is CVE-2023-33240?

CVE-2023-33240 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2023-33240?

Check the references section above for vendor advisories and patch information. Affected products include: Foxit Pdf Editor, Foxit Pdf Reader, Microsoft Windows.

Vulnerability Description

Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and 10.1.11.37866 and earlier) on Windows allows Local Privilege Escalation when installed to a non-default directory because unprivileged users have access to an executable file of a system service. This is fixed in 12.1.2.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Foxit	Pdf Editor	<= 10.1.11.37866
Foxit	Pdf Reader	<= 12.1.1.15289
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-276

References

https://www.foxit.com/support/security-bulletins.htmlVendor Advisory
https://www.foxit.com/support/security-bulletins.htmlVendor Advisory

FAQ

What is CVE-2023-33240?

CVE-2023-33240 is a vulnerability with a CVSS score of 7.8 (HIGH). Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and 10.1.11.37866 and earlier) on Windows al...

How severe is CVE-2023-33240?

CVE-2023-33240 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-33240?

Check the references section above for vendor advisories and patch information. Affected products include: Foxit Pdf Editor, Foxit Pdf Reader, Microsoft Windows.