CVE-2026-91790— Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
Quick assessment
Affected
Foxit Software Inc. Foxit PDF Editor
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF.
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-91790
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Foxit Software Inc. | Foxit PDF Editor | Versions 2026.2 and earlier | - |
|
| Foxit Software Inc. | Foxit PDF Reader | Versions 2026.2 and earlier | - |
|
II. Public POCs for CVE-2026-91790
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-91790
请登录查看更多情报信息。
Same Patch Batch · Foxit Software Inc. · 2026-09-23 · 31 CVEs total
| CVE-2026-91803 | 8.8 HIGH | Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking |
| CVE-2026-91800 | 8.8 HIGH | Foxit PDF Editor installer local privilege escalation |
| CVE-2026-91798 | 8.8 HIGH | Foxit PDF Editor/Reader Updater Privilege Escalation |
| CVE-2026-91813 | 8.8 HIGH | Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerabili |
| CVE-2026-91812 | 7.9 HIGH | Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escal |
| CVE-2026-91811 | 7.8 HIGH | Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulne |
| CVE-2026-91815 | 7.8 HIGH | Foxit PDF Editor/Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerabi |
| CVE-2026-91804 | 7.8 HIGH | Foxit PDF Editor/Reader Out-of-bounds Write Vulnerability While Rendering |
| CVE-2026-91806 | 7.8 HIGH | Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability |
| CVE-2026-91801 | 7.8 HIGH | Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution Vul |
| CVE-2026-91797 | 7.8 HIGH | Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability |
| CVE-2026-91789 | 7.8 HIGH | Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerabil |
| CVE-2026-91791 | 7.8 HIGH | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability |
| CVE-2026-91816 | 7.8 HIGH | Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerability |
| CVE-2026-91793 | 7.8 HIGH | Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability |
| CVE-2026-91792 | 7.8 HIGH | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability |
| CVE-2026-91809 | 7.8 HIGH | Foxit PDF Editor/Reader Annotation Use-After-Free Information Disclosure Vulnerability |
| CVE-2026-91802 | 7.8 HIGH | Foxit PDF Editor/Reader — Heap Buffer Overflow in WebP Image Decoding via Bitmap Stride Co |
| CVE-2026-91805 | 7.8 HIGH | Use-after-free Vulnerability in Foxit PDF Editor/Reader Page-tree Handling |
| CVE-2026-91795 | 7.8 HIGH | Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerabilit |
Showing top 20 of 31 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Foxit PDF Editor
-
CVE-2026-91788
Foxit PDF Editor/Reader Missing Authorization Information Di -
CVE-2026-91791
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Cod -
CVE-2026-91792
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Cod -
CVE-2026-91793
Foxit PDF Editor/Reader Doc Object Use-After-Free Informatio -
CVE-2026-91794
Foxit PDF Editor/Reader DeviceN Colorspace Out-Of-Bounds Wri
Same vendor: Foxit Software Inc.
-
CVE-2026-91788
Foxit PDF Editor/Reader Missing Authorization Information Di -
CVE-2026-91791
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Cod -
CVE-2026-91792
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Cod -
CVE-2026-91793
Foxit PDF Editor/Reader Doc Object Use-After-Free Informatio -
CVE-2026-91794
Foxit PDF Editor/Reader DeviceN Colorspace Out-Of-Bounds Wri
Same weakness: CWE-416
-
CVE-2026-91791
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Cod -
CVE-2026-91792
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Cod -
CVE-2026-91793
Foxit PDF Editor/Reader Doc Object Use-After-Free Informatio -
CVE-2026-91799
Foxit Editor/Reader Array resetForm Use-After-Free Vulnerabi -
CVE-2026-91805
Use-after-free Vulnerability in Foxit PDF Editor/Reader Page
V. Comments for CVE-2026-91790
No comments yet