CVE-2026-3774: Foxit PDF Editor

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) immediately before or after redaction, encryption, or printing. These script‑driven updates are not fully covered by the existing redaction, encryption, and printing logic, which, under specific document structures and user workflows, may cause a small amount of sensitive content to remain unremoved or unencrypted as expected, or result in printed output that slightly differs from what was reviewed on screen.

Affected products

• Foxit PDF Editor: up to and including 13.2.2.24014; from 14.0.0.33046, up to and including 14.0.2.33402; from 2023.1.0.15510, up to and including 2023.3.0.23028; from 2024.1.0.23997, up to and including 2024.4.1.27687; from 2025.1.0.27937, up to and including 2025.3.0.35737
• Foxit PDF Reader: up to and including 2025.3.0.35737

Published 2026-04-01. Last modified 2026-06-17.