Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and 10.1.11.37866 and earlier) on Windows allows Local Privilege Escalation when installed to a non-default directory because unprivileged users have access to an executable file of a system service. This is fixed in 12.1.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 3 products
SolarWinds Web Help Desk 12.7.5 and earlier had a critical pre-authentication RCE chain (CVE-2023-33240). This allowed unauthenticated attackers full server control. Update to version 12.7.6. Stay ahead of attackers. Follow for daily updates.
Post summary
SolarWinds Web Help Desk versions 12.7.5 and earlier are vulnerable to a pre‑authentication RCE (CVE‑2023‑33240); updating to 12.7.6 mitigates the risk.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | foxit | pdf_editor | - | - | - |
| App | foxit | pdf_reader | - | - | - |
| OS | microsoft | windows | - | - | - |