Foxit Software Inc. Foxit Pdf Editor
82 CVEs affecting Foxit Software Inc. Foxit Pdf Editor. Latest disclosed: 2026-09-23. Critical: 0, High: 56.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-91813 | High | 8.8 | 2026-09-23 | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to ins… |
CVE-2026-91803 | High | 8.8 | 2026-09-23 | A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writabl… |
CVE-2026-91800 | High | 8.8 | 2026-09-23 | A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configurat… |
CVE-2026-91798 | High | 8.8 | 2026-09-23 | A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the c… |
CVE-2025-13941 | High | 8.8 | 2025-12-19 | A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system permissions… |
CVE-2026-57239 | High | 8.2 | 2026-07-08 | The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate t… |
CVE-2026-91812 | High | 7.9 | 2026-09-23 | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks… |
CVE-2026-91818 | High | 7.8 | 2026-09-23 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation en… |
CVE-2026-91816 | High | 7.8 | 2026-09-23 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript… |
CVE-2026-91815 | High | 7.8 | 2026-09-23 | Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap… |
CVE-2026-91811 | High | 7.8 | 2026-09-23 | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fa… |
CVE-2026-91809 | High | 7.8 | 2026-09-23 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may c… |
CVE-2026-91806 | High | 7.8 | 2026-09-23 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the… |
CVE-2026-91805 | High | 7.8 | 2026-09-23 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during re… |
CVE-2026-91804 | High | 7.8 | 2026-09-23 | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in… |
CVE-2026-91802 | High | 7.8 | 2026-09-23 | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buf… |
CVE-2026-91801 | High | 7.8 | 2026-09-23 | A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow… |
CVE-2026-91799 | High | 7.8 | 2026-09-23 | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to a… |
CVE-2026-91797 | High | 7.8 | 2026-09-23 | Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be writte… |
CVE-2026-91795 | High | 7.8 | 2026-09-23 | Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal… |