EUVD-2026-25826CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionNVD
Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.
AnalysisAI
Use-after-free in Foxit PDF Reader and Foxit PDF Editor allows arbitrary code execution when specially crafted PDF documents trigger UI refresh operations after comment deletion via scripting. Local attackers can deliver malicious PDFs and achieve code execution with high integrity and confidentiality impact once a user opens the file. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all Foxit PDF Reader and Foxit PDF Editor installations across the organization and restrict external PDF handling to sandboxed environments where possible. Within 7 days: Implement application whitelisting or disable PDF scripting features in Foxit products via group policy or product configuration; contact Foxit for patch timeline and interim mitigation recommendations. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today