Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2026-91788

Foxit PDF Editor/Reader Missing Authorization Information Disclosure Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Foxit

Description

When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it externally.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Foxit Software Inc. Foxit PDF Editor

Default version status: unaffected

  • Versions 2026.2 and earlieraffected
  • Versions 14.0.7 and earlieraffected
  • Versions 13.2.6 and earlieraffected

Foxit Software Inc. Foxit PDF Reader

Default version status: unaffected

  • Versions 2026.2 and earlieraffected

References