ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-91795

Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability

CVSS 3.1 7.8 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-91795

Published

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-91795

Published

Foxit PDF Editor

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Foxit Software Inc.",
                    "product": "Foxit PDF Editor",
                    "platforms": [
                        "Windows"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "Versions 2026.2 and earlier"
                        },
                        {
                            "status": "affected",
                            "version": "Versions 14.0.7 and earlier"
                        },
                        {
                            "status": "affected",
                            "version": "Versions 13.2.6 and earlier"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Foxit PDF Reader

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Foxit Software Inc.",
                    "product": "Foxit PDF Reader",
                    "platforms": [
                        "Windows"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "Versions 2026.2 and earlier"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON