CVE-2026-91798 — HIGH (8.8)

Vulnerability Description

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Related Weaknesses (CWE)

CWE-732

References

https://www.foxit.com/support/security-bulletins.html

FAQ

What is CVE-2026-91798?

CVE-2026-91798 is a vulnerability with a CVSS score of 8.8 (HIGH). A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regul...

How severe is CVE-2026-91798?

CVE-2026-91798 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-91798?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.