Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3...

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2026-91790: Use After Free

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF...

PT-2026-97224

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue exists in the PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, which causes the application to access released pag...

PT-2026-97221

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds write occurs during WebP image decoding due to improper handling of bitmap stride and target buffer formats. This issue can lead to an application...

PT-2026-97236

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An out-of-bounds read issue occurs during the handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can lead to an integer...

PT-2026-97215

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description The interface lacks permission verification for secure reading mode. This allows a specially crafted PDF to trigger external SMB Server Message Block authentication without...

CVE-2026-91812: Improper Certificate Validation

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling arbitrary code execution with system privileges...

PT-2026-97218

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue exists in the handling of JavaScript array objects. A specially crafted PDF can trigger a use-after-free condition—where the application continues to use a memory...

PT-2026-97211

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A use-after-free condition occurs when the application processes a specially crafted PDF. This happens because page- and annotation-related JavaScript actions can trigger...

PT-2026-97216

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description Foxit PDF Editor/Reader fails to validate the directory traversal path in the attachment file name. This allows malicious attachments to be written to directories outside the...

PT-2026-97208

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description The U3D/GIF texture decoding path contains insufficient validation of image dimensions and related size information. This flaw can lead to an integer overflow, resulting in an...

PT-2026-97228

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A use-after-free issue occurs during the handling of malformed PDF form fields. This happens because of improper validation during field-name traversal, which may lead the...

PT-2026-97225

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A use-after-free issue occurs during the handling of PDF form fields. This happens when embedded JavaScript accesses form-field references after the corresponding fields have...

PT-2026-97223

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds write occurs during the rendering of Circle annotations when processing malformed Cloudy appearance streams within specially crafted PDF files. This...

CVE-2026-91797: External Control of File Name or Path

Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened...

PT-2026-97227

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor Reader affected versions not specified Description A heap-based out-of-bounds read occurs during the handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding can lead ...