Vulnetix
Try Vulnetix Request Demo
CVE-2026-2040 PUBLISHED CVSS 7.300000190734863 HIGH

PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of PDF-XChange Editor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TrackerUpdate process. The product loads a library from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of a target user. Was ZDI-CAN-27788.

EPSS 0.02% · 3.8th percentile

Risk Scores

CVSS v3.0
7.300000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.02%
3.8th percentile

Affected Products

VendorProductVersions
PDF-XChangePDF-XChange Editor10.7.2.400

Timeline

References

Open in Interactive Console →