CVE-2026-3774CWE-200

Self-Modifications Affecting Altered Printing and Redaction in Foxit PDF Editor

Medium · published April 1, 2026

CVSS v3.1
4.7
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) immediately before or after redaction, encryption, or printing. These script‑driven updates are not fully covered by the existing redaction, encryption, and printing logic, which, under specific document structures and user workflows, may cause a small amount of sensitive content to remain unremoved or unencrypted as expected, or result in printed output that slightly differs from what was reviewed on screen.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-04-01T01:40Z
EPSS history
Timeline
  • 01 APR 01:40Z
    Self-Modifications Affecting Altered Printing and Redaction in Foxit PDF Editor
    cvelistv5