Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-91800 | 8.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges. | 15 Oct |
| CVE-2026-91812 | 8.1 high | 0.00% | foxit, pdf_editor, pdf_reader | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling arbitrary code execution with system privileges. | 8 Oct |
| CVE-2026-5943 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document modifications, object reference validity was not properly maintained, leading to a crash when accessing an invalid pointer during page information queries. | Mon 26 Oct |
| CVE-2026-91811 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash. | 15 Oct |
| CVE-2025-55312 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. When pages in a PDF are deleted via JavaScript, the application may fail to properly update internal states. Subsequent annotation management operations assume these states are valid, causing dereference of invalid or released memory. This can lead to memory corruption, application crashes, and potentially allow an attacker to execute arbitrary code. | 14 Oct |
| CVE-2025-55313 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. They allow potential arbitrary code execution when processing crafted PDF files. The vulnerability stems from insufficient handling of memory allocation failures after assigning an extremely large value to a form field's charLimit property via JavaScript. This can result in memory corruption and may allow an attacker to execute arbitrary code by persuading a user to open a malicious file. | 14 Oct |
| CVE-2025-55314 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. When pages in a PDF are deleted via JavaScript, the application may fail to properly update internal states. Subsequent annotation management operations assume these states are valid, causing dereference of invalid or released memory. This can lead to memory corruption, application crashes, and potentially allow an attacker to execute arbitrary code. | 14 Oct |
| CVE-2026-91803 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges. | 8 Oct |
| CVE-2026-91809 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may cause the application to access a released object, resulting in an application crash. | 8 Oct |
| CVE-2026-91813 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation. This could enable local attackers to execute arbitrary code with elevated privileges. | 8 Oct |
| CVE-2026-91815 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap buffer during decoding, potentially causing the program to crash and introducing the risk of arbitrary code execution. | 8 Oct |
| CVE-2026-91816 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript can cause the application to access an annotation object after it has been released, resulting in a use-after-free condition and application crash. | 8 Oct |
| CVE-2026-91804 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in specially crafted PDF files. Insufficient validation of the appearance geometry can result in memory corruption and application crashes. | 8 Oct |
| CVE-2026-91801 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be written outside their intended locations, potentially enabling arbitrary code execution. | 8 Oct |
| CVE-2026-91799 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution. | 8 Oct |
| CVE-2026-91797 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened. | 8 Oct |
| CVE-2026-91795 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution. | 8 Oct |
| CVE-2026-91793 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent annotation appearance reconstruction, it accesses an object after it has been released, resulting in a use-after-free condition and an application crash. | 8 Oct |
| CVE-2026-91792 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScript actions. This can cause the application to access page objects after they have been released, resulting in a use-after-free condition and an application crash. | 8 Oct |
| CVE-2026-91791 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This can cause the application to access a released page-view object while calculating annotation boundaries, resulting in an invalid memory read and application crash. | 8 Oct |
| CVE-2026-91790 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF. | 8 Oct |
| CVE-2026-91789 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially resulting in remote code execution. | 8 Oct |
| CVE-2026-91806 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the corresponding fields have been released, resulting in an application crash. | 8 Oct |
| CVE-2026-91805 | 7.8 high | 0.00% | foxit, pdf_editor, pdf_reader | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, causing the application to access released page objects and resulting in memory corruption and an application crash. | 8 Oct |
| CVE-2025-59802 | 7.5 high | 0.00% | foxit, pdf_editor, pdf_reader | Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups (OCG) are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An attacker can leverage JavaScript or PDF triggers to dynamically change the visibility of OCG content after signing (Post-Sign), allowing the visual content of a signed PDF to be modified without invalidating the signature. This may result in a mismatch between the signed content and what the signer or verifier sees, undermining the trustworthiness of the digital signature. The fixed versions are 2025.2.1, 14.0.1, and 13.2.1. | 14 Oct |
| CVE-2025-55310 | 7.3 high | 0.00% | foxit, pdf_editor, pdf_reader | An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in information disclosure, unauthorized data access, or other security impacts. | 14 Oct |
| CVE-2026-5941 | 7.1 high | 0.00% | foxit, pdf_editor, pdf_reader | Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction. | Mon 26 Oct |
| CVE-2025-55308 | 6.7 medium | 0.00% | foxit, pdf_editor, pdf_reader | An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScript that calls closeDoc() while internal objects are still in use can cause premature release of these objects. This use-after-free vulnerability may lead to memory corruption, potentially resulting in information disclosure when the PDF is opened. | 14 Oct |
| CVE-2025-55309 | 6.7 medium | 0.00% | foxit, pdf_editor, pdf_reader | An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can contain JavaScript that attaches an OnBlur action on a form field that destroys an annotation. During user right-click interaction, the program's internal focus change handling prematurely releases the annotation object, resulting in a use-after-free vulnerability that may cause memory corruption or application crashes. | 14 Oct |
| CVE-2025-55311 | 6.5 medium | 0.00% | foxit, pdf_editor, pdf_reader | An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can use JavaScript to alter annotation content and subsequently clear the file's modification status via JavaScript interfaces. This circumvents digital signature verification by hiding document modifications, allowing an attacker to mislead users about the document's integrity and compromise the trustworthiness of signed PDFs. | 14 Oct |
| CVE-2026-91807 | 6.1 medium | 0.00% | foxit, pdf_editor, pdf_reader | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the soft-mask data attribute during image parsing may cause an arithmetic underflow, resulting in an out-of-bounds read and application crash. | 15 Oct |
| CVE-2026-91810 | 6.1 medium | 0.00% | foxit, pdf_editor, pdf_reader | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause incorrect alpha-channel processing during rendering, resulting in an out-of-bounds read and application crash. | 8 Oct |
| CVE-2026-91808 | 6.1 medium | 0.00% | foxit, pdf_editor, pdf_reader | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an application crash. | 8 Oct |
| CVE-2026-91796 | 6.1 medium | 0.00% | foxit, pdf_editor, pdf_reader | The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials. | 8 Oct |
| CVE-2026-5938 | 5.5 medium | 0.00% | foxit, pdf_editor, pdf_reader | Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service. | Mon 26 Oct |
| CVE-2026-5939 | 5.5 medium | 0.00% | foxit, pdf_editor, pdf_reader | A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution. | Mon 26 Oct |
| CVE-2026-5940 | 5.5 medium | 0.00% | foxit, pdf_editor, pdf_reader | Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes. | Mon 26 Oct |
| CVE-2026-5942 | 5.5 medium | 0.00% | foxit, pdf_editor, pdf_reader | Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program. | Mon 26 Oct |
| CVE-2026-5937 | 5.5 medium | 0.00% | foxit, pdf_editor, pdf_reader | Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately causing the program to terminate. | Mon 26 Oct |
| CVE-2026-91818 | 5.5 medium | 0.00% | foxit, pdf_editor, pdf_reader | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resulting in an application crash. | 8 Oct |
| CVE-2026-91802 | 5.5 medium | 0.00% | foxit, pdf_editor, pdf_reader | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash. | 8 Oct |
| CVE-2025-59803 | 5.3 medium | 0.00% | foxit, pdf_editor, pdf_reader | Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers. An attacker can embed triggers (e.g., JavaScript) in a PDF document that execute during the signing process. When a signer reviews the document, the content appears normal. However, once the signature is applied, the triggers modify content on other pages or optional content layers without explicit warning. This can cause the signed PDF to differ from what the signer saw, undermining the trustworthiness of the digital signature. The fixed versions are 2025.2.1, 14.0.1, and 13.2.1. | 14 Oct |
| CVE-2025-55307 | 3.3 low | 0.00% | foxit, pdf_editor, pdf_reader | An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. Opening a malicious PDF containing a crafted JavaScript call to search.query() with a crafted cDIPath parameter (e.g., "/") may cause an out-of-bounds read in internal path-parsing logic, potentially leading to information disclosure or memory corruption. | 14 Oct |
43 of 43
Download these 43 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.