vulnerability

Foxit Reader: Uncontrolled Search Path Element (CVE-2020-26538)

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Oct 2, 2020
Added
Oct 13, 2020
Modified
Jan 28, 2025

Description

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory.

Solution

foxit-reader-upgrade-10_1
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.