CVE-2026-3779

The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted documents to trigger a use-after-free when the calculation runs and can potentially lead to arbitrary code execution.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

History

28 Apr 2026, 14:15

Type Values Removed Values Added
First Time Foxit
Microsoft windows
Microsoft
Foxit pdf Reader
Apple macos
Apple
Foxit pdf Editor
References () https://www.foxit.com/support/security-bulletins.html - () https://www.foxit.com/support/security-bulletins.html - Vendor Advisory
References () https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2365 - () https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2365 - Third Party Advisory, Exploit
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
Summary
  • (es) La lógica de cálculo de la matriz del cuadro de lista de la aplicación mantiene referencias obsoletas a objetos de página o formulario después de que son eliminados o recreados, lo que permite que documentos manipulados activen un uso después de liberación cuando se ejecuta el cálculo y puede conducir potencialmente a ejecución de código arbitrario.

01 Apr 2026, 04:16

Type Values Removed Values Added
References
  • () https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2365 -

01 Apr 2026, 02:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-04-01 02:16

Updated : 2026-04-28 14:15


NVD link : CVE-2026-3779

Mitre link : CVE-2026-3779

CVE.ORG link : CVE-2026-3779


JSON object : View

Products Affected

microsoft

  • windows

foxit

  • pdf_editor
  • pdf_reader

apple

  • macos
CWE
CWE-416

Use After Free