CVE-2018-17631

CVE-2018-17631 is a critical remote code execution vulnerability affecting Foxit Reader 9.2.0.9297 and Foxit PhantomPDF. It stems from improper validation of object existence during the handling of the removeInstance event, allowing an attacker to execute arbitrary code in the context of the current process. This vulnerability has a high CVSS score of 8.8, indicating a severe impact with high confidentiality, integrity, and availability compromise, requiring user interaction (e.g., opening a malicious file or visiting a malicious page) for exploitation. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.