Known Vulnerabilities for products from Foxit

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Foxit".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-91818 json Not Provided 2026-09-23 2026-09-23
CVE-2026-91817 json A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF ... Not Provided 2026-09-23 2026-10-01
CVE-2026-91816 json Not Provided 2026-09-23 2026-09-23
CVE-2026-91815 json Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads ... Not Provided 2026-09-23 2026-10-08
CVE-2026-91814 json Not Provided 2026-09-23 2026-09-23
CVE-2026-91813 json A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and ... Not Provided 2026-09-23 2026-10-08
CVE-2026-91812 json Not Provided 2026-09-23 2026-09-23
CVE-2026-91811 json A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validatio... Not Provided 2026-09-23 2026-10-15
CVE-2026-91810 json A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. In... Not Provided 2026-09-23 2026-10-08
CVE-2026-91809 json A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validati... Not Provided 2026-09-23 2026-10-08
CVE-2026-91808 json A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with incons... Not Provided 2026-09-23 2026-10-08
CVE-2026-91807 json A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask dat... Not Provided 2026-09-23 2026-10-15
CVE-2026-91806 json A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may acc... Not Provided 2026-09-23 2026-10-08
CVE-2026-91805 json A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trig... Not Provided 2026-09-23 2026-10-08
CVE-2026-91804 json A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with mal... Not Provided 2026-09-23 2026-10-08
CVE-2026-91803 json A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-... Not Provided 2026-09-23 2026-10-08
CVE-2026-91802 json A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper hand... Not Provided 2026-09-23 2026-10-08
CVE-2026-91801 json A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validatio... Not Provided 2026-09-23 2026-10-08
CVE-2026-91800 json A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validati... Not Provided 2026-09-23 2026-10-15
CVE-2026-91799 json A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafte... Not Provided 2026-09-23 2026-10-08

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report