CVE-2026-91788

4.7 Moyenne

Publiée le 23/09/2026 à 10:17 · Modifiée le 23/09/2026 à 19:58 · Analyse NVD en cours · Source : 14984358-7092-470d-8f34-ade47a7658a2

Description

When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it externally.

Traduire en français

Produits concernés

Foxit Software Inc. Foxit PDF Editor
Foxit Software Inc. Foxit PDF Reader

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.7 Moyenne	14984358-7092-470d-8f34-ade47a7658a2	`CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-668

Références

https://www.foxit.com/support/security-bulletins.html

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories