CERT24CVE-2026-91788 — Foxit PDF Editor/Reader Missing Authorization Information Disclosure VulnerabilityLoading data…

CVE-2026-91788 — Foxit PDF Editor/Reader Missing Authorization Information Disclosure Vulnerability

Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification when implementing its JavaScript interface. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it externally.

← Back to intelligence

CVE-2026-91788 — Foxit PDF Editor/Reader Missing Authorization Information Disclosure Vulnerability

Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification when implementing its JavaScript interface. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it externally.