Orta CVSS 5.5
CVE-2026-91788: Pdf Editor: güvenlik açığı
Açıklama (NVD)
When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it externally.
Özet bilgiler
- Ürün
- Foxit Pdf Editor
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - EPSS
- %0,10 (yüzdelik 1)
- CWE
- CWE-668
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| foxit-pdf-editor | — | 13.2.6.24111 | — |
| foxit-pdf-editor | 14.0.0.33046 | 14.0.7.33751 | — |
| foxit-pdf-editor | 2023.1.0.15510 | 2023.3.0.23028 | — |
| foxit-pdf-editor | 2024.1.0.23997 | 2024.4.1.27687 | — |
| foxit-pdf-editor | 2025.1.0.27937 | 2025.3.0.35737 | — |
| foxit-pdf-editor | 2026.1.0.36452 | 2026.2.0.39747 | — |
| foxit-pdf-reader | — | 2026.2.0.39747 | — |
| foxit-pdf-editor | — | 13.2.6.63484 | — |
| foxit-pdf-editor | 14.0.0.68868 | 14.0.7.69441 | — |
| foxit-pdf-editor | 2023.1.0.55583 | 2023.3.0.63083 | — |
| foxit-pdf-editor | 2024.1.0.63682 | 2024.4.1.66479 | — |
| foxit-pdf-editor | 2025.1.0.66692 | 2025.3.0.69570 | — |
| foxit-pdf-editor | 2026.1.0.70169 | 2026.2.0.72029 | — |
| foxit-pdf-reader | — | 2026.2.0.72029 | — |