CVE-2018-7406: An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1.

Security readout for executives and security teams

This is a remote code execution flaw in Foxit Reader and PhantomPDF before version 9.1. A victim would need to open a malicious PDF or visit a malicious page. If successful, attacker-controlled code could run with the user's application privileges. Exposure is likely on workstations or servers where Foxit Reader or PhantomPDF versions earlier than 9.1 remain installed, especially where users open external PDFs from email, web downloads, ticketing systems, or shared drives. Treat this as a high-priority legacy software risk. It is not cited as actively exploited in the supplied evidence, but arbitrary code execution through PDFs is a credible business threat because it can enter through routine user workflows. Mitigation focus: Upgrade Foxit Reader and PhantomPDF to version 9.1 or later.; Check Foxit security bulletins for the vendor-approved update path.; Reduce exposure to untrusted PDFs through mail and web filtering..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.