What is CVE-2023-33240?

CVE-2023-33240 is a high-severity vulnerability in Foxit Pdf Editor, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2023-05-19.

How severe is CVE-2023-33240?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Foxit Pdf Editor

CVE-2023-33240

Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and 10.1.11.37866 and earlier) on Windows allows Local Privilege Escalation when installed to a non-default directory because unprivileged users have access to an executable file of a system service. This is fixed in 12.1.2.

EPSS: 0.002 (5.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2023-33240?: CVE-2023-33240 is a high-severity vulnerability in Foxit Pdf Editor, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2023-05-19.
How severe is CVE-2023-33240?: High severity. CVSS v3 base score is 7.8 out of 10.