ZDI-26-735: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
ZDI reported a Foxit PDF Reader Doc object use-after-free that can leak information after user interaction (CVE-2026-91806).
24
CVE-2026-91806
Unauthenticated Use-After-Free in Foxit PDF Editor/Reader 5.0+ (CVE-2026-91806)
- CVSS 3.1
- 7.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
This vulnerability involves a use-after-free flaw in Foxit PDF Editor/Reader that allows embedded JavaScript to access form-field references after the fields are released, potentially causing application crashes. An attacker can exploit this by exploiting the unvalidated form-field references, gaining unauthorized access to sensitive system data or other application functionality. The affected scope includes Foxit PDF Editor/Reader across all known versions, though specific version ranges are not provided in the data. Current exploitation status is none_known, with no public PoC available.
What to do: Upgrade to patched versions of Foxit PDF Editor/Reader. Apply mitigations such as form-field lifecycle validation and input sanitization. Monitor affected products for deployment and verify compliance.
| Product | Affected |
|---|---|
| Foxit PDF Editor/Reader | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the corresponding fields have been released, resulting in an application crash.
- Vendors
- foxit
- Products
- pdf editor, pdf reader
- Weakness
- CWE-416
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H