EN

Tracker / CVE-2026-3774

CVE-2026-3774

Media 4.7

The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) immediately before or after redaction, encryption, or printing. These script‑driven updates are not fully covered by the existing redaction, encryption, and printing logic, which, under specific document structures and user workflows, may cause a small amount of sensitive content to remain unremoved or unencrypted as expected, or result in printed output that slightly differs from what was reviewed on screen.

Prodotti e versioni affette

foxit pdf_editor · … → 13.2.2.24014
foxit pdf_editor · 14.0.0.33046 → 14.0.2.33402
foxit pdf_editor · 2023.1.0.15510 → 2023.3.0.23028
foxit pdf_editor · 2024.1.0.23997 → 2024.4.1.27687
foxit pdf_editor · 2025.1.0.27937 → 2025.3.0.35737
foxit pdf_reader · … → 2025.3.0.35737

Analisi

Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.

Riferimenti