6.1

CVE-2026-91796

Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Foxit ≫ Pdf Editor Version <= 13.2.5.63482
   Microsoft ≫ Windows Version -
Foxit ≫ Pdf Editor Version >= 14.0.0.33046 <= 14.0.7.33751
   Microsoft ≫ Windows Version -
Foxit ≫ Pdf Editor Version >= 2023.1.0.15510 <= 2023.3.0.23028
   Microsoft ≫ Windows Version -
Foxit ≫ Pdf Editor Version >= 2024.1.0.23997 <= 2024.4.1.27687
   Microsoft ≫ Windows Version -
Foxit ≫ Pdf Editor Version >= 2025.1.0.27937 <= 2025.3.0.35737
   Microsoft ≫ Windows Version -
Foxit ≫ Pdf Editor Version >= 2026.1.0.36452 <= 2026.2.0.39747
   Microsoft ≫ Windows Version -
Foxit ≫ Pdf Reader Version <= 2026.2.0.39747
   Microsoft ≫ Windows Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.017
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
14984358-7092-470d-8f34-ade47a7658a2 6.1 1.8 4.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

https://www.foxit.com/support/security-bulletins.html
Vendor Advisory