High severity7.8NVD Advisory· Published Sep 23, 2026· Updated Oct 8, 2026
CVE-2026-91818
CVE-2026-91818
Description
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resulting in an application crash.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1- www.foxit.com/support/security-bulletins.htmlnvdVendor Advisory
News mentions
1- ZDI-26-746: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityZero Day Initiative · Sep 23, 2026