Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) immediately before or after redaction, encryption, or printing. These script‑driven updates are not fully covered by the existing redaction, encryption, and printing logic, which, under specific document structures and user workflows, may cause a small amount of sensitive content to remain unremoved or unencrypted as expected, or result in printed output that slightly differs from what was reviewed on screen.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 3 products
⚡ New CVE Alert: CVE-2026-3774 📊 Severity: 4.7 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3774 #CVE-2026-3774 #CVE #Medium #CyberSecurity #InfoSec https://t.co/a6TmdN6azD
Post summary
The tweet announces CVE-2026-3774 with a severity of 4.7 and risk level medium, but provides no technical details, PoC, exploit code, or patch information.
CVE-2026-3774 The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) imme… https://www.cve.org/CVERecord?id=CVE-2026-3774
Post summary
The CVE summary indicates a PDF JavaScript flaw that allows arbitrary modification of form fields, annotations, or content groups; however, no PoC, exploit, active use, or patch is mentioned.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | foxit | pdf_editor | - | - | - |
| App | foxit | pdf_reader | - | - | - |
| OS | microsoft | windows | - | - | - |