Vulnerabilities

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by…

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This can cause the application to access a released page-view object while calculating annotation boundaries, resulting in an invalid memory read and application crash.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Oracle

Product

java

CVSS

7.8

Exposure class

Endpoint security

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-91791 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 15
   CVE NVD 23 Sep 2026

   When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and…

   CVSS 7.8 CVE-2026-91792 Oracle
2. 21
   ZDI advisory ZDI 23 Sep 2026

   Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

   CVSS 7.8 CVE-2026-91791 Foxit / Nitro / PDF-XChange