Foxit Patches 20 Vulnerabilities in PDF Reader and Editor

• •Foxit patched 20 vulnerabilities in its PDF Reader and Editor on July 8, 2026.
• •The vulnerabilities could allow remote code execution and local privilege escalation.
• •No active exploits are known, but user interaction is necessary for potential attacks.

On July 8, 2026, Foxit Software released updates for its PDF Reader and Editor to address 20 vulnerabilities, including multiple use-after-free flaws that could lead to remote code execution (RCE). The vulnerabilities, rated from moderate to important, affect various versions on Windows and macOS. Attackers could exploit these flaws through specially crafted PDFs, potentially allowing program crashes or unauthorized code execution. No active exploits have been reported, but user interaction is required for successful attacks. Users are advised to update to versions 2026.1.2 or later. The updates also address local privilege escalation issues that could allow unprivileged users to gain elevated rights. The security bulletins provide detailed information on affected versions and vulnerabilities.