CVE-2026-91805: falha de alta gravidade em Foxit PDF Editor
Use-after-free Vulnerability in Foxit PDF Editor/Reader Page-tree Handling
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.2%
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, causing the application to access released page objects and resulting in memory corruption and an application crash.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVEs relacionadas — Foxit PDF Editor
No mesmo produto, das mais perigosas para as menos.
CVE-2026-57259MEDIUMFoxit PDF Editor/Reader XDP XFA XXE arbitrary local file readEPSS 0.4%CVE-2026-91797HIGHFoxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-3779HIGHFoxit PDF Editor/Reader List Box Calculate Array Use-After-Free VulnerabilityEPSS 0.3%CVE-2025-66495HIGHFoxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-66494HIGHFoxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-66493HIGHFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityEPSS 0.3%