CVE-2026-92178

CVE-2026-92178 is a memory corruption vulnerability (CWE-119) in how pdfforge PDF Architect parses PDF files, caused by improper validation of user-supplied data during parsing. A remote attacker can exploit it by convincing a target to visit a malicious page or open a specially crafted PDF, after which the attacker executes arbitrary code in the context of the current process, gaining the privileges of the logged-in user. All users of affected PDF Architect installations are potentially at risk, though exploitation requires user interaction, which the CVSS 3.0 score of 7.8 (AV:L/AC:L/PR:N/UI:R) reflects. The flaw was disclosed through Trend Micro's Zero Day Initiative as ZDI-CAN-28916. There is no known public proof of concept and it is not listed in CISA's Known Exploited Vulnerabilities catalog.

What to do: Update PDF Architect to the latest version as soon as pdfforge releases a patch and verify the fixed version against the ZDI advisory for ZDI-CAN-28916. Until patched, instruct users not to open PDF files from untrusted sources or follow links to untrusted pages, and consider blocking PDF attachments from unknown senders at the mail gateway. Since exploitation runs code as the logged-in user, running users without administrator privileges will limit the blast radius.