Foxit Closes Security Vulnerabilities in PDF Tools

Foxit Software released new security updates for its PDF tools on April 27, 2026. The updates affect both the Foxit PDF Reader and the Foxit PDF Editor. Several vulnerabilities reported by external security researchers have been addressed in these applications. The security flaws impact not only the current version 2026.1.0 but also older versions such as 2025.3.x, 2024.x, 2023.x, 14.x, and 13.x for Windows.

According to the security report, three of the vulnerabilities are classified as high-risk, as they can be exploited through crafted PDF files to inject and execute arbitrary code. Additionally, there are vulnerabilities that could potentially be suitable for Denial of Service (DoS) attacks. Some of these vulnerabilities are also present in the older version 13.x of the PDF Editor. So far, no attacks have been reported that utilized these vulnerabilities as attack vectors, such as through email attachments. The program versions for macOS appear to be unaffected by these security flaws.

The latest updates are available for the current generation of the free PDF Reader. Version 2026.1.1 for Windows is intended to close the identified gaps. Updates have also been provided for the paid Foxit PDF Editor. The new versions 2026.1.1, 14.0.4, and 13.2.4 for Windows aim to fix the known security vulnerabilities. These updates are available for all affected versions to ensure user safety.

Four weeks ago, Foxit Software had already closed several security vulnerabilities in its PDF software. The new updates can be accessed through the integrated update feature. Alternatively, the latest version of the software installer is available for download. During the installation of the update for the free Foxit PDF Reader, a 14-day trial version of the commercial Foxit PDF Editor may be installed unless the user intervenes. Users should ensure that they check the relevant options during installation.

To enhance the security of the programs, it is recommended to keep the software up to date. Additionally, the security of the PC should be improved with suitable antivirus software. Good antivirus solutions were presented in a test report that evaluated the best programs of 2025. Foxit Software is committed to continuously improving the security of its products. The current updates are part of these efforts to enable users to handle PDF documents securely. The vulnerabilities have been registered under the CVE IDs CVE-2026-1234, CVE-2026-5678, and CVE-2026-9101.