Known vulnerabilities in Foxit PDF Editor (formerly Foxit PhantomPDF) 2026.2.0.39747

Version: 2026.2.0.39747
Software CPE: cpe:2.3:a:foxit_software:foxit_phantompdf:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Foxit PDF Editor (formerly Foxit PhantomPDF) version 2026.2.0.39747 Foxit PDF Editor (formerly Foxit PhantomPDF) 2026.2.0.39747 is affected by 30 vulnerabilities: 19 high, 3 medium, 8 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151830 - External Control of File Name or Path
CVE-2026-91797
CWE-73 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151831 - Incorrect Permission Assignment for Critical Resource
CVE-2026-91798
CWE-732 Low
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151832 - Uncontrolled Search Path Element
CVE-2026-91803
CWE-427 Low
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151833 - Improper Certificate Validation
CVE-2026-91812
CWE-295 Medium
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151834 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-91813
CWE-367 Low
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151835 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-91801
CWE-22 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151836 - Improper Verification of Cryptographic Signature
CVE-2026-91814
CWE-347 Medium
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151818 - Use After Free
CVE-2026-91790
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151819 - Use After Free
CVE-2026-91791
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151820 - Use After Free
CVE-2026-91792
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151821 - Use After Free
CVE-2026-91793
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151822 - Use After Free
CVE-2026-91799
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151823 - Use After Free
CVE-2026-91805
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151824 - Use After Free
CVE-2026-91806
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151825 - Use After Free
CVE-2026-91809
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151826 - Use After Free
CVE-2026-91816
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151827 - Use After Free
CVE-2026-91818
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151828 - Untrusted Pointer Dereference
CVE-2026-91795
CWE-822 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151829 - Protection Mechanism Failure
CVE-2026-91796
CWE-693 Low
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151807 - Exposure of resource to wrong sphere
CVE-2026-91788
CWE-668 Medium
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343


Showing elements 1 - 20 out of 30