High severity7.8NVD Advisory· Published Sep 23, 2026· Updated Oct 8, 2026
CVE-2026-91793
CVE-2026-91793
Description
When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data. During subsequent annotation appearance reconstruction, it accesses an object after it has been released, resulting in a use-after-free condition and an application crash.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1- www.foxit.com/support/security-bulletins.htmlnvdVendor Advisory
News mentions
2- Foxit PDF Editor/Reader: 23 Vulnerabilities Disclosed in Single Batch, Affecting Multiple ComponentsVypr Intelligence · Sep 23, 2026
- ZDI-26-729: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure VulnerabilityZero Day Initiative · Sep 23, 2026