VULNERABILITY INTELLIGENCE

CVE-2022-43310

CVSS score7.8 HIGH

EPSS probability1.61%

CISA KEVNot currently listed

Published2022-11-09

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.

Weakness classification

CWE-427: Uncontrolled Search Path Element

Primary references

cve@mitre.org — Third Party Advisory
cve@mitre.org — Vendor Advisory
cve@mitre.org — Not Applicable, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Not Applicable, Vendor Advisory