CVE-2026-91799

Foxit Editor/Reader Array resetForm Use-After-Free Vulnerability

Published Sep 23, 2026 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Description

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution.

Analysis

Technical impact

Foxit PDF Editor and Reader contain a use‑after‑free flaw in the handling of JavaScript array objects. A specially crafted PDF can trigger the application to access a freed object during array processing, which may cause the program to crash or allow an attacker to run arbitrary code. The weakness corresponds to CWE‑416 and can compromise confidentiality, integrity, and availability of the system.

Affected Systems

The vulnerability affects Foxit Software Inc. products – Foxit PDF Editor and Foxit PDF Reader. No specific version range is provided, so all released versions should be examined against the vendor’s security bulletins for a fix.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity. EPSS is listed as < 1 %, suggesting a low likelihood of active exploitation at present, and the vulnerability is not in CISA’s KEV catalog. The likely attack vector is a malicious PDF presented to a user; once the user opens the file, the flaw may be triggered, leading to code execution or denial‑of‑service.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Foxit Software Inc.

Foxit PDF Editor

unaffected

Version	Status	Constraints
`Versions 2026.2 and earlier`	affected	—
`Versions 14.0.7 and earlier`	affected	—
`Versions 13.2.6 and earlier`	affected	—

Foxit Software Inc.

Foxit PDF Reader

unaffected

Version	Status	Constraints
`Versions 2026.2 and earlier`	affected	—

Configuration 1 [-]

AND

OR	cpe:2.3:a:foxit:pdf_editor::::::::
	cpe:2.3:a:foxit:pdf_editor::::::::
	cpe:2.3:a:foxit:pdf_editor::::::::
	cpe:2.3:a:foxit:pdf_editor::::::::
	cpe:2.3:a:foxit:pdf_editor::::::::
	cpe:2.3:a:foxit:pdf_editor::::::::
	cpe:2.3:a:foxit:pdf_reader::::::::

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Foxitsoftware

Foxit Pdf Editor

Version	Status	Scheme	Platform
`[0,2026.2]`	affected	calver	['windows']
`[0,14.0.7]`	affected	semver	['windows']
`[0,13.2.6]`	affected	semver	['windows']

Foxitsoftware

Foxit Reader

Version	Status	Scheme	Platform
`[0,2026.2]`	affected	calver	['windows']

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the latest Foxit PDF Editor/Reader patch available from the security bulletin on foxit.com
Disable or restrict JavaScript execution within the PDF viewer where possible; consider using a sandboxed or hardened viewer
Implement a policy to block or quarantine unknown or unsigned PDF documents before they reach end users
Monitor system logs for crashes or anomalous behavior and investigate promptly

Generated by OpenCVE AI on September 23, 2026 at 14:49 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.185% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://www.foxit.com/support/security-bulletins.html

History

Oct 8, 2026 2:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Foxit Foxit pdf Editor Foxit pdf Reader Microsoft Microsoft windows
CPEs		cpe:2.3:a:foxit:pdf_editor:::::::: cpe:2.3:a:foxit:pdf_reader:::::::: cpe:2.3:o:microsoft:windows:-:::::::*
Vendors & Products		Foxit Foxit pdf Editor Foxit pdf Reader Microsoft Microsoft windows

Sep 24, 2026 9:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Foxitsoftware Foxitsoftware foxit Pdf Editor Foxitsoftware foxit Reader
Vendors & Products		Foxitsoftware Foxitsoftware foxit Pdf Editor Foxitsoftware foxit Reader

Sep 23, 2026 3:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sep 23, 2026 11:45 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution.
Title		Foxit Editor/Reader Array resetForm Use-After-Free Vulnerability
Weaknesses		CWE-416
References		https://www.foxit.com/support/security-bulletins.html
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`