A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity val…

High CVSS 8.8

CVECVE-2026-91813

First seen2026-09-23 08:31 UTC

Disclosed2026-09-23 08:17 UTC

Last updated2026-09-23 08:31 UTC

Channel statusauto

Summary

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation. This could enable local attackers to execute arbitrary code with elevated privileges.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://www.foxit.com/support/security-bulletins.html

Timeline

2026-09-23 nvd_ingest NVD