ZDI-CAN-29495 HIGH 7.8 Upcoming Mar 30, 2026

Foxit

Foxit is a well-known software company that develops PDF readers and document management solutions widely used in enterprise environments. This high-severity vulnerability requires local access and user interaction but requires no authentication, and if exploited could allow an attacker to gain complete control over confidentiality, integrity, and availability of the affected system. Security teams should monitor for patches from Foxit by the July 2026 deadline and prioritize updates for systems where users regularly open untrusted PDF documents.

Advisory Details
Researcher Anonymous
Reported March 30, 2026
Deadline July 28, 2026 103d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy