CVE-2026-91818 — Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may rele…
Published: 2026-09-23 · CVSS: 7.8 · CVSS 3.1
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resulting in an application crash.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7