Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP entry, the code continues to dereference the associated object without a prior null or validity check, which allows a crafted document to trigger a null pointer dereference and crash the application, resulting in denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
⚡ New CVE Alert: CVE-2026-3776 📊 Severity: 5.5 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3776 #CVE-2026-3776 #CVE #Medium #CyberSecurity #InfoSec https://t.co/wYodtKkCqw
Post summary
The tweet announces CVE-2026-3776 as a medium‑severity vulnerability affecting multiple unspecified products, providing a CVSS score and linking to the NVD detail page.
CVE-2026-3776 The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources. When a PDF contains a stamp annotation miss… https://www.cve.org/CVERecord?id=CVE-2026-3776
Post summary
The passage offers a brief technical description of CVE‑2026‑3776 but provides no evidence of exploitation, patches, or proof of concept.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | foxit | pdf_editor | - | - | - |
| App | foxit | pdf_reader | - | - | - |
| OS | microsoft | windows | - | - | - |