Vulnerability Spotlight: Foxit PDF Reader Java Script Array.includes remote code execution vulnerability
Summary: Cisco Talos researcher Aleksandar Nikolic discovered a remote code execution vulnerability in the JavaScript engine of Foxit PDF Reader version 9.4.1.16828, where a specially crafted PDF triggers an out-of-memory condition that is not handled properly and results in arbitrary code execution. An attacker must trick the user into opening the malicious file, though visiting a malicious site can also trigger it if the browser plugin extension is enabled.
Why it matters: Exploitation requires only that a user open a PDF or, with the browser plugin enabled, visit a malicious site - so a single document or link is enough to hand an attacker code execution on the endpoint.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026