Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106212 | high | 8.8 | No | Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtai... | 2026-10-08 |
| CVE-2026-106213 | medium | 4.3 | No | Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a cra... | 2026-10-08 |
| CVE-2026-91803 | high | 7.8 | No | A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries... | 2026-10-08 |
| CVE-2026-91809 | high | 7.8 | No | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-n... | 2026-10-08 |
| CVE-2026-91810 | medium | 6.1 | No | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image... | 2026-10-08 |
| CVE-2026-91812 | high | 8.1 | No | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and packag... | 2026-10-08 |
| CVE-2026-91813 | high | 7.8 | No | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege ex... | 2026-10-08 |
| CVE-2026-91815 | high | 7.8 | No | Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bound... | 2026-10-08 |
| CVE-2026-91816 | high | 7.8 | No | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by e... | 2026-10-08 |
| CVE-2026-91818 | medium | 5.5 | No | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing d... | 2026-10-08 |
| CVE-2026-91804 | high | 7.8 | No | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy app... | 2026-10-08 |
| CVE-2026-91802 | medium | 5.5 | No | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap st... | 2026-10-08 |
| CVE-2026-91801 | high | 7.8 | No | A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource f... | 2026-10-08 |
| CVE-2026-91808 | medium | 6.1 | No | A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compressio... | 2026-10-08 |
| CVE-2026-91799 | high | 7.8 | No | A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause t... | 2026-10-08 |
| CVE-2026-91797 | high | 7.8 | No | Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments bein... | 2026-10-08 |
| CVE-2026-91796 | medium | 6.1 | No | The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to t... | 2026-10-08 |
| CVE-2026-91795 | high | 7.8 | No | Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could... | 2026-10-08 |
| CVE-2026-91793 | high | 7.8 | No | When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malfor... | 2026-10-08 |
| CVE-2026-17635 | critical | 9.1 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper c... | 2026-10-08 |