{"id":"CVE-2015-8843","aliases":["EUVD-2015-8709","GHSA-rw82-83m8-mfj2"],"status":"published","title":"The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7...","description":"The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.","severity":{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00656,"percentile":0.51693,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2016-04-13T15:00:00Z","modified":"2026-06-17T00:35:21Z","products":[{"vendor":"foxitsoftware","product":"foxit_reader"}],"references":[{"url":"https://www.foxitsoftware.com/support/security-bulletins.php#FRD-35","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-640","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8843"},{"url":"https://github.com/advisories/GHSA-rw82-83m8-mfj2"}],"sources":{"cve":[{"id":"CVE-2015-8843","description":"The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.","status":"published","published":"2016-04-13T15:00:00Z","modified":"2024-09-16T17:33:36.908Z","updated_at":"2026-11-02T14:35:41.26549Z"}],"euvd":[{"id":"EUVD-2015-8709","description":"The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.","status":"published","published":"2016-04-13T15:00:00Z","modified":"2024-09-16T17:33:36Z","updated_at":"2026-11-03T00:55:41.00036Z"}],"ghsa":[{"id":"GHSA-rw82-83m8-mfj2","title":"The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7...","description":"The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.","status":"published","published":"2022-05-17T03:56:54Z","modified":"2023-01-28T05:00:49Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:25.46952Z"}],"nvd":[{"id":"CVE-2015-8843","description":"The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.","status":"published","published":"2016-04-13T15:59:10.727Z","modified":"2026-06-17T00:35:21.503Z","cvss":[{"version":"3.0","score":7.4,"vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:16.97467Z"}]}}