Foxit

Latest CVEs · RSS

• CVE-2026-91788 2026-09-23 · CVSS 4.7
  When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a resul
• CVE-2026-91790 2026-09-23 · CVSS 7.8
  When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result
• CVE-2026-91791 2026-09-23 · CVSS 7.8
  When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visib
• CVE-2026-91792 2026-09-23 · CVSS 7.8
  When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScrip
• CVE-2026-91793 2026-09-23 · CVSS 7.8
  When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. Durin
• CVE-2026-91794 2026-09-23 · CVSS 7.8
  An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when
• CVE-2026-91795 2026-09-23 · CVSS 7.8
  Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal p
• CVE-2026-91796 2026-09-23 · CVSS 6.1
  The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB
• CVE-2026-91797 2026-09-23 · CVSS 7.8
  Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written
• CVE-2026-91799 2026-09-23 · CVSS 7.8
  A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to ac
• CVE-2026-91805 2026-09-23 · CVSS 7.8
  A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during ren
• CVE-2026-91800 2026-09-23 · CVSS 8.8
  A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configurati
• CVE-2026-91801 2026-09-23 · CVSS 7.8
  A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow
• CVE-2026-91802 2026-09-23 · CVSS 7.8
  A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buff
• CVE-2026-91804 2026-09-23 · CVSS 7.8
  A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in s
• CVE-2026-91806 2026-09-23 · CVSS 7.8
  A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the c
• CVE-2026-91807 2026-09-23 · CVSS 6.1
  A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the sof
• CVE-2026-91798 2026-09-23 · CVSS 8.8
  A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the co
• CVE-2026-91803 2026-09-23 · CVSS 8.8
  A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable
• CVE-2026-91808 2026-09-23 · CVSS 6.1
  A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insuffic
• CVE-2026-91810 2026-09-23 · CVSS 6.1
  A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause i
• CVE-2026-91811 2026-09-23 · CVSS 7.8
  A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan
• CVE-2026-91812 2026-09-23 · CVSS 7.9
  A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks,
• CVE-2026-91813 2026-09-23 · CVSS 8.8
  A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insu
• CVE-2026-91815 2026-09-23 · CVSS 7.8
  Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap