Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate their privileges to NT AUTHORITY\SYSTEM.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 3 products
| Date | Total | Labels |
|---|
| 2026-07-08 | 2 | Disclosure2 |
| 2026-07-09 | 1 | Patch1 |
| 2026-07-20 | 3 | Disclosure2General1 |
| 2026-07-23 | 2 | PoC2 |
| 2026-07-29 | 2 | Exploit1PoC1 |
| 2026-08-03 | 1 | Disclosure1 |
| 2026-09-13 | 2 | Disclosure2 |
Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239) https://blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492
Post summary
The content references a newly disclosed privilege‑escalation flaw in Foxit PDF Reader (CVE‑2026‑57239) and links to a blog post for details, but provides no information on PoCs, exploitation, or patches.
🚨 A public PoC has been released for CVE-2026-57239 affecting Foxit PDF Reader and Foxit PDF Editor The flaw allows a local privilege escalation (LPE) to NT AUTHORITY\SYSTEM via the applications update mechanism Patched in the latest releases 🔗 https://github.com/Paradoxis/CVE-2026-57239 #Foxit
Post summary
A public PoC for CVE-2026-57239 has been released, demonstrating local privilege escalation in Foxit PDF Reader/Editor, and the vulnerability is already patched in the latest releases.
A public proof-of-concept for CVE-2026-57239 turns a Foxit PDF Reader vulnerability into full SYSTEM privileges via local privilege escalation. #Foxit #CVE202657239 #PrivilegeEscalation #InfoSec http://securityonline.info/foxit-pdf-reader-cve-2026-57239/
Post summary
The post announces a public proof‑of‑concept for CVE‑2026‑57239, showing that a Foxit PDF Reader flaw can be leveraged for local privilege escalation to SYSTEM level, but it does not mention any patch or active exploitation.
Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239) https://blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492
Post summary
The text points to a blog post announcing a new privilege‑escalation vulnerability (CVE‑2026‑57239) in Foxit PDF Reader, providing technical details but no PoC, exploit, or patch information.
Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239) https://blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492
Post summary
The post announces a new privilege‑escalation flaw in Foxit PDF Reader (CVE‑2026‑57239) but does not provide a PoC, exploit code, technical details, or mitigation instructions.
CVE-2026-57239: Escalating All The Privileges With Foxit PDF Reader PT ID: PT-2026-56338 https://dbugs.ptsecurity.com/vulnerability/PT-2026-56338 Most local Windows LPEs require a complex exploitation chain. But sometimes all it takes is looking at how an application updates itself. Researcher Luke Paris (Paradoxis) discovered that the update mechanism of Foxit PDF Reader / PDF Editor allows a standard user to elevate privileges to "NT AUTHORITY\SYSTEM". The vulnerability was assigned the identifier CVE-2026-57239 -> (https://dbugs.ptsecurity.com/vulnerability/CVE-2026-57239). During update checks, the Foxit service, running with elevated privileges, downloaded and executed binaries whose paths could be controlled by an unprivileged user. As a result, a trusted process effectively executed arbitrary code with "SYSTEM" privileges. The vulnerability affects Foxit PDF Reader version 2026.1.1 and earlier, as well as several generations of Foxit PDF Editor (13.x, 14.x, 2023–2026). The fix was released as part of Foxit PDF Reader 2026.1.2 and the corresponding PDF Editor updates. Article: https://blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492 PoC: https://github.com/Paradoxis/CVE-2026-57239 #dbugs_attacks
Post summary
Foxit PDF Reader’s update mechanism can be abused to gain SYSTEM privileges; a PoC was published and a patch released in 2026.1.2
CVE-2026-57239: Foxit PDF Reader SYSTEM Exploit PoC - https://securityonline.info/foxit-pdf-reader-cve-2026-57239/
Post summary
A Proof of Concept for CVE-2026-57239 in Foxit PDF Reader has been published, providing exploit code, but there is no evidence of active exploitation or available patches.
"Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239)" by Luke Paris #InfoSec #CyberSecurity #Hacking #BugBounty https://blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492
Post summary
The post nominally announces a privilege‑escalation issue in Foxit PDF Reader (CVE‑2026‑57239) but provides no substantive technical, exploit, or mitigation information.
https://blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492 Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239)
Post summary
The linked blog post announces a new privilege‑escalation vulnerability in Foxit PDF Reader, identified as CVE-2026‑57239, but offers no evidence of active exploitation, a PoC, or mitigation.
Foxit PDF Reader の権限昇格の脆弱性 CVE-2026-57239：SYSTEM 権限奪取の恐れ https://iototsecnews.jp/2026/07/24/foxit-pdf-reader-flaw-lets-local-attackers-gain-system-privileges-via-dll-sideloading/ Foxit PDF Reader の脆弱性 CVE-2026-57239 について解説する記事です。この件は、ローカル環境で権限昇格が発生してしまう問題です。主な原因は、特権で動作する更新サービスが、誰でも書き込める ProgramData ディレクトリ内のファイルを監視していた点にあります。悪意のユーザーが暗号化された更新リクエストを送信すると、通常ユーザーの AppData 内からアップデーターが呼び出されてしまいます。 さらに、その UI 上のリンク操作により、作業ディレクトリから外部ファイル "winspool.drv" が SYSTEM 権限で読み込まれてしまう、DLL サイド・ローディングの仕組みが重なったことで、権限の昇格につながってしまいます。ご利用のチームは、ご注意ください。 #CVE202657239 #Foxit #PDFReader #Vulnerability
Post summary
The article announces and explains the CVE‑2026‑57239 privilege‑escalation flaw in Foxit PDF Reader, detailing the DLL side‑loading mechanism, but provides no PoC, exploit code, patch information, or evidence of active exploitation.
🚨 Foxit patch time: CVE-2026-57239 could turn update-service access into SYSTEM. “Just a PDF reader” is adorable until your attacker gets admin privileges through the update pipe. #Windows #Security #PatchNow https://windowsforum.com/threads/cve-2026-57239-update-foxit-to-2026-1-2-14-0-5-or-13-2-5.436444/?utm_source=x&utm_medium=social&utm_campaign=news_node4 #PdfReader #VulnerabilityManagement #PdfEditor https://t.co/hKlc3OiOwV
Post summary
The post highlights CVE‑2026‑57239 in Foxit as a privilege‑escalation flaw via the update service and urges users to apply patches or updates to mitigate the risk.
🚨*CVE* CVE-2026-57239 The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate their pr… https://www.cve.org/CVERecord?id=CVE-2026-57239 ----- Traducción: CVE-2026-57239 Los… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-57239, detailing a privilege escalation vulnerability where user‑controlled executables are run by elevated processes, and links to the official CVE record.
CVE-2026-57239 The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate their pr… https://www.cve.org/CVERecord?id=CVE-2026-57239
Post summary
The text announces CVE-2026-57239, describing a privilege‑elevation issue where user‑controlled executables can be run by high‑privilege processes, but it offers no PoC, exploit, or mitigation details.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | foxit | pdf_editor | - | - | - |
| App | foxit | pdf_reader | - | - | - |
| OS | microsoft | windows | - | - | - |