CVE-2026-91788: CWE-668 Exposure of Resource to Wrong Sphere in Foxit Software Inc. Foxit PDF Editor
When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it externally.
AI Analysis
Technical Summary
Foxit PDF Editor/Reader's JavaScript interface does not enforce attribute authorization checks as specified, leading to an exposure of resources to an incorrect security sphere (CWE-668). This enables a malicious PDF, trusted by the user, to access sensitive data from other documents loaded in the same process and potentially exfiltrate that data. The vulnerability is classified under CWE-668 and has a CVSS 3.1 base score of 4.7, indicating medium severity. No vendor advisory or patch information is available to confirm remediation status.
Potential Impact
A trusted malicious PDF can bypass intended access controls within the Foxit PDF Editor/Reader process to read sensitive content from other open documents and potentially transmit that data externally. This compromises confidentiality but does not affect integrity or availability. The attack requires local access to open a malicious PDF and user interaction (UI required).
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening PDFs from untrusted sources, especially if multiple documents are open simultaneously.
CVE-2026-91788: CWE-668 Exposure of Resource to Wrong Sphere in Foxit Software Inc. Foxit PDF Editor
Description
When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it externally.
CVSS v3.1
Score 4.7medium
Affected software
Foxit Software Inc.
Foxit PDF Editor
Foxit Software Inc.
Foxit PDF Reader
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Foxit PDF Editor/Reader's JavaScript interface does not enforce attribute authorization checks as specified, leading to an exposure of resources to an incorrect security sphere (CWE-668). This enables a malicious PDF, trusted by the user, to access sensitive data from other documents loaded in the same process and potentially exfiltrate that data. The vulnerability is classified under CWE-668 and has a CVSS 3.1 base score of 4.7, indicating medium severity. No vendor advisory or patch information is available to confirm remediation status.
Potential Impact
A trusted malicious PDF can bypass intended access controls within the Foxit PDF Editor/Reader process to read sensitive content from other open documents and potentially transmit that data externally. This compromises confidentiality but does not affect integrity or availability. The attack requires local access to open a malicious PDF and user interaction (UI required).
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening PDFs from untrusted sources, especially if multiple documents are open simultaneously.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Foxit
- Date Reserved
- 2026-09-15T07:34:40.287Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ab387c8f7a7c541067c165e
Added to database: 09/23/2026, 08:03:20 UTC
Last enriched: 09/23/2026, 08:32:57 UTC
Last updated: 09/24/2026, 03:12:50 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.