CVE-2024-41605

8.4 highEPSS 0.2%

High (8.4). EPSS 0.2% chance of exploitation in the next 30 days.

In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loading, because the update service lacks integrity validation for the updater. Attacker-controlled code may thus be executed.

Severity

CVSS 3.1

8.4 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2024-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.foxit.com/support/security-bulletins.html

Check your stack JSON