Vulnerability in popular PDF reader could lead to arbitrary code execution; Multiple issues in GNOME project
Summary: Cisco Talos disclosed six new vulnerabilities, including a use-after-free memory corruption flaw in Foxit PDF Reader (TALOS-2024-1967, CVE-2024-28888) that can be triggered by a malicious PDF containing JavaScript or by visiting an attacker-controlled site with the Foxit browser extension enabled. Talos also reported two arbitrary code execution vulnerabilities in GNOME's libgsf (CVE-2024-36474 and CVE-2024-42415) and three in Veertu's Anka Build, two directory traversal issues (CVE-2024-41163, CVE-2024-41922) and a privilege escalation flaw (CVE-2024-39755) that could raise a low-privileged user to root.
Key Takeaway: The Foxit flaw needs only a user opening a crafted PDF or visiting a malicious site with the browser extension on, and the Anka Build privilege escalation lets a low-privileged user push themselves to root on the CI/CD infrastructure used to test macOS and iOS applications.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-28888CVE-2024-36474CVE-2024-39755CVE-2024-41163CVE-2024-41922CVE-2024-42415
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026