EUVD-2026-85166

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...

EUVD-2026-85165

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an applicati...

CVE-2026-91808

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader during the handling of PDF image objects with inconsistent compression metadata. The issue stems from insufficient validation during image decoding, which can result in an undersized buffer . This vulnerability leads ...

CVE-2026-91810

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader involving the handling of malformed PDF image masks . The root cause is linked to inconsistent image metadata , which may cause incorrect alpha-channel processing during rendering. This flaw can lead to an out-of-boun...

EUVD-2026-85164

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause incorrect alpha-channel processing during rendering, resulting in an out-of-bounds read and application crash...

CVE-2026-91811

Foxit PDF Editor/Reader contains a heap-based out-of-bounds write vulnerability within its PRC parser . The vulnerability is caused by insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation of this flaw could lead to memory corruption and an applicatio...

EUVD-2026-85163

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash...

EUVD-2026-85162

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling arbitrary code execution with system privileges...

CVE-2026-91812

A vulnerability in the Foxit PDF Editor/Reader update mechanism (specifically FoxitUpdater ) allows man-in-the-middle attackers to bypass certificate validation and package integrity checks . This flaw could potentially enable arbitrary code execution with system privileges . No specific remediat...

EUVD-2026-85161

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation. This could enable local attackers to execute arbitrary code with elevated privileges...

CVE-2026-91813

A vulnerability in the Foxit PDF Editor/Reader update mechanism (specifically FoxitUpdater ) allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation . This race condition could enable local attackers to execu...

CVE-2026-91815

Foxit PDF Editor/Reader is vulnerable to CVE-2026-91815 due to insufficient verification of JPEG2000 image metadata within PDF files. This flaw leads to an out-of-bounds write in the heap buffer during decoding, which can result in a program crash or the risk of arbitrary code execution . No spec...

EUVD-2026-85160

Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap buffer during decoding, potentially causing the program to crash and introducing the risk of arbitrary code execution...

CVE-2026-91814

Foxit PDF Editor/Reader is vulnerable to a signature validation vulnerability within its handling of incrementally updated PDF documents . The root cause is that modifications to visible document content may not invalidate the existing digital signature. This allows an attacker to alter signed co...

EUVD-2026-85159

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and potentially carry out content spoofing while the...

CVE-2026-91816

Foxit PDF Editor/Reader is susceptible to a use-after-free vulnerability in its handling of PDF annotations . The vulnerability is triggered by reentrant annotation deletion initiated through embedded JavaScript , which causes the application to access an annotation object after it has been relea...

EUVD-2026-85158

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript can cause the application to access an annotation object after it has been released, resulting in a use-after-free condition and applicati...

EUVD-2026-85157

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-of-bounds read and application crash...

CVE-2026-91817

Foxit PDF Editor/Reader is vulnerable to a heap-based out-of-bounds read (CVE-2026-91817) during the handling of wide strings in embedded PDF JavaScript . The root cause is insufficient validation of string-deletion ranges , which can trigger an integer underflow . This flaw leads to an out-of-bo...

CVE-2026-91817 Foxit PDF Editor/Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-of-bounds read and application crash...