PT-2026-97231

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue exists in the update mechanism of the software where improper certificate validation occurs. This allows a man-in-the-middle attacker to bypass package integrity...

PT-2026-97221

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds write occurs during WebP image decoding due to improper handling of bitmap stride and target buffer formats. This issue can lead to an application...

PT-2026-97235

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A use-after-free condition occurs during the handling of PDF annotations. This issue is triggered by reentrant annotation deletion via embedded JavaScript, which causes the...

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162

The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module does not sufficiently restrict access to the custom attributes YAML editor. Users with permission to create or edit webforms but without permission to edit...

CVE-2026-91796: Protection Mechanism Failure

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

PT-2026-97208

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description The U3D/GIF texture decoding path contains insufficient validation of image dimensions and related size information. This flaw can lead to an integer overflow, resulting in an...

PT-2026-97216

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description Foxit PDF Editor/Reader fails to validate the directory traversal path in the attachment file name. This allows malicious attachments to be written to directories outside the...

CVE-2026-91798: Incorrect Permission Assignment for Critical Resource

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...

PT-2026-97236

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An out-of-bounds read issue occurs during the handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can lead to an integer...

CVE-2026-91817: Out-of-bounds Read

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-of-bounds read and application crash...

CVE-2026-91804: Out-of-bounds Write

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in specially crafted PDF files. Insufficient validation of the appearance geometry can result in memory corruption and application crashes...

PT-2026-97223

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds write occurs during the rendering of Circle annotations when processing malformed Cloudy appearance streams within specially crafted PDF files. This...

PT-2026-97209

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A Use-After-Free UAF issue occurs when the software renders a page image. The program fails to validate image objects with malformed optional content attributes, leading to th...

PT-2026-97218

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue exists in the handling of JavaScript array objects. A specially crafted PDF can trigger a use-after-free condition—where the application continues to use a memory...

PT-2026-97226

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An out-of-bounds read occurs during the parsing of PDF files due to insufficient validation of image soft-mask data. A malformed soft-mask data attribute can trigger an...

PT-2026-97659

Name of the Vulnerable Software and Affected Versions Drupal Webform versions 6.2.x through 6.3.x Description The Webform module does not sufficiently restrict access to the custom attributes YAML editor. Users with permissions to create or edit webforms, but lacking permissions to edit the webfo...

PT-2026-97224

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue exists in the PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, which causes the application to access released pag...

PT-2026-97210

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A use-after-free condition exists when processing specially crafted PDF files. The issue occurs due to a reentrant execution condition involving JavaScript triggered by...

CVE-2026-91816: Use After Free

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript can cause the application to access an annotation object after it has been released, resulting in a use-after-free condition and applicati...

CVE-2026-91789: Out-of-bounds Write

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially...