2026-09-24 归档

今日共收录 1600 条安全情报,包含 683 个 CVE,518 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-09-23 发布INFO

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file loc...

CVE-2026-91813

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabl...

CVE-2026-91812

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. ...

CVE-2026-91811

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient valida

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause incorrect alpha-ch...

CVE-2026-91810

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may cause the applicati...

CVE-2026-91809

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper valid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation d...

CVE-2026-91808

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the soft-mask data attri...

CVE-2026-91807

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the corresponding fiel...

CVE-2026-91806

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during rendering, causing t...

CVE-2026-91805

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in specially crafted ...

CVE-2026-91804

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during...

CVE-2026-91803

A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dyn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Succe...

CVE-2026-91802

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be writt...

CVE-2026-91801

A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient vali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during h...

CVE-2026-91800

A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient val

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to access a released o...

CVE-2026-91799

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially cra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file ...

CVE-2026-91798

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure per

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories o...

CVE-2026-91797

Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malici

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication wi...

CVE-2026-91796

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows special

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an inva...

CVE-2026-91795

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted P

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malfo...

CVE-2026-91794

An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient

历史摘要 · 未重新核验 · NVD