ZDI-26-733: Foxit PDF Reader Portfolio Directory Traversal Remote Code Execution Vulnerability
ZDI disclosed a Foxit PDF Reader portfolio directory traversal that can lead to remote code execution.
48
Product
Foxit PDF Reader
- Mentions · 7d0
- Mentions · 30d0
- All mentions37
- First seenAug 24, 2026
- Last mentionedSep 23, 2026
Timeline
37 articles · newest firstZDI-26-742: Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability
FoxitUpdater race condition CVE-2026-91813 lets a local low-privileged attacker escalate privileges on Foxit PDF Reader.
34
ZDI-26-737: Foxit PDF Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI disclosed a Foxit PDF Reader JPEG parsing out-of-bounds read that can leak information (CVE-2026-91808).
24
ZDI-26-740: Foxit PDF Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI disclosed a Foxit PDF Reader out-of-bounds write that can enable remote code execution.
58
ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability
Foxit PDF Reader RichMedia directory traversal can allow remote code execution after user interaction.
52
ZDI-26-735: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
ZDI reported a Foxit PDF Reader Doc object use-after-free that can leak information after user interaction (CVE-2026-91806).
24
ZDI-26-744: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
ZDI disclosed a Foxit PDF Reader AcroForm use-after-free enabling remote code execution via a malicious file.
48
ZDI-26-722: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
ZDI disclosed a Foxit PDF Reader annotation use-after-free enabling remote code execution after user interaction (CVE-2026-91791).
48
ZDI-26-741: Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability
ZDI disclosed a FoxitUpdater certificate flaw that lets network-adjacent attackers run code after a user opens a malicious file.
48
ZDI-26-736: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI disclosed a Foxit PDF Reader out-of-bounds read that can disclose sensitive information.
24
ZDI-26-729: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
ZDI disclosed a low-severity Foxit PDF Reader use-after-free that can leak information.
24
ZDI-26-726: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
ZDI disclosed another Foxit PDF Reader use-after-free, CVE-2026-13129, that can disclose information after user interaction.
24
ZDI-26-720: Foxit PDF Reader activeDocs Missing Authorization Information Disclosure Vulnerability
Foxit PDF Reader activeDocs flaw can leak information if a user opens a malicious file.
32
ZDI-26-746: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
A second Foxit PDF Reader annotation use-after-free can allow remote code execution with user interaction (CVE-2026-91818).
48
ZDI-26-724: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
ZDI disclosed a Foxit PDF Reader annotation use-after-free that allows remote code execution.
48
ZDI-26-738: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
ZDI discloses a Foxit PDF Reader annotation use-after-free that can leak data if a user opens a malicious file.
20
ZDI-26-728: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
ZDI disclosed a Foxit PDF Reader Doc object use-after-free that can leak data if a user opens a malicious file.
24
ZDI-26-731: Foxit PDF Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability
Foxit PDF Reader FileOpen flaw CVE-2026-91795 allows remote code execution if a user opens a malicious file.
42
ZDI-26-739: Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI disclosed a low-severity Foxit PDF Reader out-of-bounds read that can leak information.
24
ZDI-26-727: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader annotation use-after-free CVE-2026-13128 enables remote code execution via a malicious file.
42
ZDI-26-725: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
ZDI disclosed another Foxit PDF Reader use-after-free information-disclosure flaw, CVE-2026-57256.
24
ZDI-26-723: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
ZDI disclosed Foxit PDF Reader use-after-free CVE-2026-91790, which can leak information after a user opens a malicious file.
24
ZDI-26-732: Foxit PDF Reader importIcon NTLM Response Information Disclosure Vulnerability
ZDI disclosed an NTLM response leak in Foxit PDF Reader importIcon, tracked as CVE-2026-91796.
24
ZDI-26-721: Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI disclosed a Foxit PDF Reader U3D integer overflow that can enable remote code execution.
48
ZDI-26-743: Foxit PDF Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability
Foxit PDF Reader JPEG2000 parsing bug CVE-2026-91815 can yield remote code execution after user interaction.
42
ZDI-26-730: Foxit PDF Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability
Foxit PDF Reader DeviceN out-of-bounds write can enable remote code execution after user interaction.
52
ZDI-26-745: Foxit PDF Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability
Foxit PDF Reader AcroForm out-of-bounds read may allow remote code execution with user interaction.
52
ZDI-26-602: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
ZDI disclosed a use-after-free in Foxit PDF Reader (CVE-2026-13128) enabling remote code execution when a user opens a malicious file.
24
ZDI-26-596: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Foxit PDF Reader out-of-bounds read in PDF parsing (CVE-2026-57253, CVSS 3.3) can leak sensitive information via malicious files.
15
ZDI-26-603: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader has a second annotation use-after-free vulnerability (CVE-2026-13127, CVSS 7.8) allowing remote code execution via malicious files or pages.
30
ZDI-26-604: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader use-after-free flaw (CVE-2026-13126) allows remote code execution when users open malicious files; CVSS 7.8 per ZDI advisory.
25
ZDI-26-599: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
ZDI published advisory ZDI-26-599 for a use-after-free information disclosure flaw (CVE-2026-57238, CVSS 3.3) in Foxit PDF Reader requiring user interaction.
12
ZDI-26-595: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader has a use-after-free vulnerability (CVE-2026-57254, CVSS 7.8) allowing remote code execution when a user opens a malicious file or page.
30
ZDI-26-598: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader AcroForm use-after-free (CVE-2026-57242, CVSS 7.8) permits remote code execution through malicious PDF files or pages.
25
ZDI-26-601: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
Foxit PDF Reader has a use-after-free vulnerability (CVE-2026-13129, CVSS 3.3) allowing sensitive information disclosure when a user opens malicious content.
15
ZDI-26-600: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
Foxit PDF Reader annotation use-after-free (CVE-2026-57237, CVSS 3.3) can disclose sensitive information when users open malicious PDFs.
15
ZDI-26-597: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Foxit PDF Reader has a use-after-free vulnerability (CVE-2026-57252, CVSS 7.8) allowing remote code execution via malicious AcroForm content.
30
Related CVEs
by mentions- CVE-2026-13129<1%7.8When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form…
- CVE-2026-57238<1%7.8After the application opened the PDF, JavaScript deleted the form field object
- CVE-2026-13128<1%7.8Embedding JavaScript within a PDF file will cause the page to be deleted
- CVE-2026-91812 RCE in Foxit PDF Editor/Reader Update Mechanism
- Reentrant Zoom RCE in Foxit PDF Editor/Reader 5.0+ (CVE-2026-91792)
- Unauthenticated Use-After-Free in Foxit PDF Editor/Reader 5.0+ (CVE-2026-91806)
- CVE-2026-57256<1%7.8When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form…
- Use-After-Free in Foxit PDF Editor/Reader via Crafted PDF JavaScript
- CVE-2026-57253<1%6.1An abnormal image object causes the renderer to enter the wrong processing branch
- Heap Out-of-Bounds Read in Foxit PDF Editor/Reader Soft-Mask Parsing
Appears with
- Foxitvendor · 37
- Zero Day Initiativeorganization · 36
- FoxitUpdaterproduct · 2
- Zero Day Initiativevendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.