SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2020-26540

Because the Hardened Runtime protection mechanism is not applied to code signing, code injection (or an information leak) can occur.

HIGH 7.5EPSS 0.67%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.67%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mechanism is not applied to code signing, code injection (or an information leak) can occur.

CVSS 3.1
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.67% probability · 50th percentile
CISA KEV
Not listed
Weakness
CWE-347
Affected
foxitsoftware/foxit reader · foxitsoftware/phantompdf
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.