CVE-2026-91792High· 7.8▾ TwilightWhen processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScript actions. This can cause the application to access page objects after they h…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 23.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Last analysed / modified upstream
When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScript actions. This can cause the application to access page objects after they have been released, resulting in a use-after-free condition and an application crash.
pdf_editor <= 13.2.5.63482pdf_editor >= 14.0.0.33046, <= 14.0.7.33751pdf_editor >= 2023.1.0.15510, <= 2023.3.0.23028pdf_editor >= 2024.1.0.23997, <= 2024.4.1.27687pdf_editor >= 2025.1.0.27937, <= 2025.3.0.35737pdf_editor >= 2026.1.0.36452, <= 2026.2.0.39747pdf_reader <= 2026.2.0.39747Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-91818High· 7.8A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations
CVE-2026-91816High· 7.8A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations
CVE-2026-91809High· 7.8A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields
CVE-2026-91806High· 7.8A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields
CVE-2026-91805High· 7.8A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling
CVE-2026-91799High· 7.8A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects