CVE-2026-91818

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resulting in an application crash.

Score
CVSS 3.1 7.8 High
Status
Analyzed - 14984358-7092-470d-8f34-ade47a7658a2
Published
2026-09-23
Last modified
2026-10-08
Weaknesses
CWE-416

Affected products

References