CVE-2026-91818
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resulting in an application crash.
- Published Sep 23, 2026
- CVSS 7.8 high
- 0.1% chance of exploitation in the next 30 days (EPSS)