Is CVE-2026-91817 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-91817?

CVE-2026-91817 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-91817

Description

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-of-bounds read and application crash.