High severity7.8NVD Advisory· Published Sep 23, 2026· Updated Oct 8, 2026
CVE-2026-91795
CVE-2026-91795
Description
Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1- www.foxit.com/support/security-bulletins.htmlnvdVendor Advisory
News mentions
1- ZDI-26-731: Foxit PDF Reader FileOpen Uninitialized Variable Remote Code Execution VulnerabilityZero Day Initiative · Sep 23, 2026