GCVE-110-NCSC-2025-401

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published December 24, 2025

A local privilege escalation vulnerability in the Foxit PDF Reader/Editor Update Service allows low-privileged attackers to modify resources, potentially enabling arbitrary code execution with SYSTEM privileges.

Download JSON Open in Console

Weaknesses (CWE)

CWE-732Incorrect Permission Assignment for Critical ResourceCWE-416Use After FreeCWE-125Out-of-bounds ReadCWE-190Integer Overflow or Wraparound

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Foxit	vers:unknown/*	—	—

Aliases

CVE-2025-13941 CVE-2025-57779 CVE-2025-58085 CVE-2025-59488 CVE-2025-66493 CVE-2025-66494 CVE-2025-66495 CVE-2025-66496 CVE-2025-66497 CVE-2025-66498 CVE-2025-66499

References

advisory

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON