Foxit, Epic Games Store, Med Dreams vulnerabilities
Summary: Cisco Talos disclosed three vulnerabilities in Foxit PDF Editor, one in the Epic Games Store, and twenty-one in MedDream PACS, all of which have been patched by their vendors. The Foxit issues include a Microsoft Store installation privilege escalation (CVE-2025-57779) and two use-after-free flaws (CVE-2025-58085, CVE-2025-59488) triggerable by JavaScript in a malicious PDF, while the Epic Games Store flaw (CVE-2025-61973) is a local privilege escalation via DLL replacement during Microsoft Store installation and the MedDream PACS Premium 7.3.6.870 issues are reflected cross-site scripting flaws.
Bottom line: The Foxit use-after-free bugs can yield arbitrary code execution from a malicious PDF or a crafted site when the browser plugin extension is enabled, and the 21 MedDream PACS XSS flaws sit in a system handling DICOM medical images.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-57779CVE-2025-58085CVE-2025-59488CVE-2025-61973
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026