PDF-XChange Editor Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in PDF-XChange Editor. This issue arises in the TrackerUpdate process, where the application loads a library from an unsecured location. An attacker with the ability to execute low-privileged code on the target system can exploit this vulnerability to escalate privileges and execute code in the context of the affected user.

Impact

Exploitation of this vulnerability allows local attackers to escalate privileges and execute code with elevated rights, potentially leading to unauthorized access or modifications within the system.

Remediation

Users can upgrade to PDF-XChange Editor version 10.7.3.401 to address this vulnerability.