PT-2026-29434 · Adobe · Pdf

Published 2026-04-01 · Updated 2026-04-01 · CVE-2026-3774

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Multiple / Unspecified Products (affected versions not specified)

Description The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) immediately before or after redaction, encryption, or printing. These script-driven updates are not fully covered by the existing redaction, encryption, and printing logic. Under specific document structures and user workflows, this may cause a small amount of sensitive content to remain unremoved or unencrypted as expected, or result in printed output that slightly differs from what was reviewed on screen.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-3774

Affected Products

Pdf

References · 4

• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3774 · Security Note
• https://twitter.com/CVEarity/status/2039287713338413171 · Twitter Post
• https://twitter.com/CVEnew/status/2039279683230134611 · Twitter Post