CVE-2026-91799
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released object during array processing, potentially resulting in application crashes or arbitrary code execution.
- Published Sep 23, 2026
- CVSS 7.8 high
- 0.1% chance of exploitation in the next 30 days (EPSS)