5.3Orta
CVE-2026-91814Security vulnerability: Foxit PDF Editor/Reader Fails to Detect Modifications to Signed Documents Displaying Newly Added Content
Açıklama
A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and potentially carry out content spoofing while the document continues to appear validly signed.
Zayıflık türü (CWE):
CWE-347
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Foxit Software Inc. | Foxit PDF Editor | Versions 2026.2 and earlier, Versions 14.0.7 and earlier, Versions 13.2.6 and earlier | |
| Foxit Software Inc. | Foxit PDF Reader | Versions 2026.2 and earlier | |
| foxit | pdf editor | ≤ 13.2.5.63482 | |
| foxit | pdf reader | ≤ 2026.2.0.39747 |
Kaynaklar ve yamalar
- https://www.foxit.com/support/security-bulletins.html Vendor Advisory
CPE eşleşmeleri (NVD) (14)
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≤ 13.2.5.63482cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 14.0.0.33046 ≤ 14.0.7.33751cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2023.1.0.15510 ≤ 2023.3.0.23028cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2024.1.0.23997 ≤ 2024.4.1.27687cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2025.1.0.27937 ≤ 2025.3.0.35737cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2026.1.0.36452 ≤ 2026.2.0.39747cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*≤ 2026.2.0.39747cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≤ 13.2.2.63349cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 14.0.0.68868 ≤ 14.0.7.69441cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2023.1.0.55583 ≤ 2023.3.0.63083cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2024.1.0.63682 ≤ 2024.4.1.66479cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2025.1.0.66692 ≤ 2025.3.0.69570cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2026.1.0.70169 ≤ 2026.2.0.72029cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*≤ 2026.2.1.39815