CVE-2026-91795

HIGHCVSS 7.8

Description

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution.

Timeline

Published:September 23rd, 2026 8:17 AM

Last modified:September 23rd, 2026 5:58 PM

CVSS Scoring

CVSS v3: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-822

References & Reports

Advisories, patches, and third-party reports

https://www.foxit.com/support/security-bulletins.html

Source: NIST NVD · Data may lag official sources by up to one minute