CVE-2026-91817: Out-of-bounds Read

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-of-bounds read and application crash...

CVE-2026-91806: Use After Free

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the corresponding fields have been released, resulting in an application crash...

CVE-2026-91805: Use After Free

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, causing the application to access released page objects and resulting in memory corruption and an application crash...

CVE-2026-91811: Out-of-bounds Write

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash...

CVE-2026-91810: Out-of-bounds Read

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause incorrect alpha-channel processing during rendering, resulting in an out-of-bounds read and application crash...

CVE-2026-91809: Use After Free

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may cause the application to access a released object, resulting in an application crash...

CVE-2026-91808: Out-of-bounds Read

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an applicati...

PT-2026-97218

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue exists in the handling of JavaScript array objects. A specially crafted PDF can trigger a use-after-free condition—where the application continues to use a memory...

PT-2026-97225

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A use-after-free issue occurs during the handling of PDF form fields. This happens when embedded JavaScript accesses form-field references after the corresponding fields have...

PT-2026-97226

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An out-of-bounds read occurs during the parsing of PDF files due to insufficient validation of image soft-mask data. A malformed soft-mask data attribute can trigger an...

PT-2026-97227

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor Reader affected versions not specified Description A heap-based out-of-bounds read occurs during the handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding can lead ...

PT-2026-97228

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A use-after-free issue occurs during the handling of malformed PDF form fields. This happens because of improper validation during field-name traversal, which may lead the...

PT-2026-97229

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds read occurs during the handling of malformed PDF image masks. Inconsistent image metadata can lead to incorrect alpha-channel processing during...

PT-2026-97223

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds write occurs during the rendering of Circle annotations when processing malformed Cloudy appearance streams within specially crafted PDF files. This...

PT-2026-97224

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue exists in the PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, which causes the application to access released pag...

PT-2026-97212

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description Opening a specially crafted PDF causes the application to execute scripts that modify annotation rich-text attributes containing malformed font data. During the subsequent...

Linux Distros Unpatched Vulnerability : CVE-2026-88340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient...

CVE-2026-91802: Out-of-bounds Write

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...

CVE-2026-91818: Use After Free

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resulting in an application crash...

PT-2026-97592

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description IBM Concert contains a use-after-free flaw, which occurs when a program continues to use a pointer after the memory it points to has been released. An attacker capable of influencing program...