Is CVE-2026-91790 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-91790?

CVE-2026-91790 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-91790

Description

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF.