[ Vendor · 31 CVEs ]
Foxit Software Inc.
CVEs affecting Foxit Software Inc. published in the last 30 days, plus any Foxit Software Inc. CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-91817 | 23 Sep 2026 | CVSS 6.1 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient… | |
| CVE-2026-91818 | 23 Sep 2026 | CVSS 5.5 | Foxit Software Inc. Foxit PDF EditorA use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during… | |
| CVE-2026-91809 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name… | |
| CVE-2026-91810 | 23 Sep 2026 | CVSS 6.1 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata… | |
| CVE-2026-91811 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in… | |
| CVE-2026-91812 | 23 Sep 2026 | CVSS 8.1 | Foxit Software Inc. Foxit PDF EditorA vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package… | |
| CVE-2026-91813 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction… | |
| CVE-2026-91814 | 23 Sep 2026 | CVSS 5.3 | Foxit Software Inc. Foxit PDF EditorA signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document… | |
| CVE-2026-91815 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorFoxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write… | |
| CVE-2026-91816 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded… | |
| CVE-2026-91800 | 23 Sep 2026 | CVSS 8.8 | Foxit Software Inc. Foxit PDF EditorA local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable… | |
| CVE-2026-91801 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths… | |
| CVE-2026-91802 | 23 Sep 2026 | CVSS 5.5 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and… | |
| CVE-2026-91803 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a… | |
| CVE-2026-91804 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance… | |
| CVE-2026-91805 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes… | |
| CVE-2026-91806 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references… | |
| CVE-2026-91807 | 23 Sep 2026 | CVSS 6.1 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation… | |
| CVE-2026-91808 | 23 Sep 2026 | CVSS 6.1 | Foxit Software Inc. Foxit PDF EditorA heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression… | |
| CVE-2026-91792 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorWhen processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and… | |
| CVE-2026-91793 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorWhen opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font… | |
| CVE-2026-91794 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorAn out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary… | |
| CVE-2026-91795 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorFoxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an… | |
| CVE-2026-91796 | 23 Sep 2026 | CVSS 6.1 | Foxit Software Inc. Foxit PDF EditorThe interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger… | |
| CVE-2026-91797 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorFoxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to… | |
| CVE-2026-91798 | 23 Sep 2026 | CVSS 8.8 | Foxit Software Inc. Foxit PDF EditorA local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that… | |
| CVE-2026-91799 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorA use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the… | |
| CVE-2026-91788 | 23 Sep 2026 | CVSS 4.7 | Foxit Software Inc. Foxit PDF EditorWhen implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification… | |
| CVE-2026-91789 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorFoxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under… | |
| CVE-2026-91790 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorWhen rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed… | |
| CVE-2026-91791 | 23 Sep 2026 | CVSS 7.8 | Foxit Software Inc. Foxit PDF EditorWhen processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by… |