CVE-2026-91813
Received Received - Intake

Arbitrary Code Execution in Foxit PDF Editor/Reader via Update Mechanism

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: Foxit

Description
A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation. This could enable local attackers to execute arbitrary code with elevated privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-23
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-91813
EUVD
EUVD-2026-85161

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
foxit pdf_editor *
foxit pdf_reader *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-367 The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves Foxit PDF Editor/Reader's update process. An attacker can replace an update package between download and extraction because the system does not properly lock files or validate their integrity. This allows malicious code to run with high privileges on the affected system.

Impact Analysis

If exploited, this flaw could let attackers run arbitrary code on your computer with elevated privileges. This means they could install malware, steal data, or take full control of your system without your knowledge.

Mitigation Strategies

Disable automatic updates for Foxit PDF Editor/Reader until a patch is available. Monitor Foxit's official website for security advisories and apply updates manually once released. Restrict write permissions to Foxit's update directories to prevent unauthorized file replacement.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-91813. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart