CVE-2026-91795 — HIGH (7.8)

Q: How severe is CVE-2026-91795?

CVE-2026-91795 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-91795?

Check the references section above for vendor advisories and patch information. Affected products include: Foxit Pdf Editor, Foxit Pdf Reader, Microsoft Windows.

Vulnerability Description

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Foxit	Pdf Editor	<= 13.2.5.63482
Foxit	Pdf Reader	<= 2026.2.0.39747
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-822

References

https://www.foxit.com/support/security-bulletins.htmlVendor Advisory

FAQ

What is CVE-2026-91795?

CVE-2026-91795 is a vulnerability with a CVSS score of 7.8 (HIGH). Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in...

How severe is CVE-2026-91795?

CVE-2026-91795 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-91795?

Check the references section above for vendor advisories and patch information. Affected products include: Foxit Pdf Editor, Foxit Pdf Reader, Microsoft Windows.