Yüksek CVSS 7.8
CVE-2026-91801: Pdf Editor: dizin geçişi
Açıklama (NVD)
A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be written outside their intended locations, potentially enabling arbitrary code execution.
Özet bilgiler
- Ürün
- Foxit Pdf Editor
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %0,21 (yüzdelik 11)
- CWE
- CWE-22
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| foxit-pdf-editor | — | 13.2.5.63482 | — |
| foxit-pdf-editor | 14.0.0.33046 | 14.0.7.33751 | — |
| foxit-pdf-editor | 2023.1.0.15510 | 2023.3.0.23028 | — |
| foxit-pdf-editor | 2024.1.0.23997 | 2024.4.1.27687 | — |
| foxit-pdf-editor | 2025.1.0.27937 | 2025.3.0.35737 | — |
| foxit-pdf-editor | 2026.1.0.36452 | 2026.2.0.39747 | — |
| foxit-pdf-reader | — | 2026.2.0.39747 | — |