important · Privilege — Windows
A network-adjacent attacker can make Foxit PDF Reader's updater execute code as SYSTEM.
Affects
Foxit PDF Reader, a Windows desktop PDF viewer with a privileged updater.
The path requires victim interaction, but FoxitUpdater then accepts content without properly validating the update server certificate and consumes it in its privileged context.
Detail and 2 sources
Foxit identifies the affected Reader versions and a fixed release.