CVE-2026-91799

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution.

Score
CVSS 3.1 7.8 High
Status
Analyzed - 14984358-7092-470d-8f34-ade47a7658a2
Published
2026-09-23
Last modified
2026-10-08
Weaknesses
CWE-416

Affected products

References

 
 
© AVABIS GmbH privacypolicy about