CVE-2022-24955

CRITICAL

Foxit Pdf Reader < 11.1.0.52543 - Uncontrolled Search Path

Title source: rule

Description

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.

Scores

CVSS v3 9.8
EPSS 0.0069
EPSS Percentile 71.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-427
Status published

Affected Products (2)

foxit/pdf_reader < 11.1.0.52543
foxit/pdf_editor < 10.1.6.37749

Timeline

Published Feb 11, 2022
Tracked Since Feb 18, 2026