CVE-2019-6763

CVE-2019-6763 is a remote code execution vulnerability affecting Foxit Reader 9.4.1.16828 and PhantomPDF, stemming from a flaw in the ToggleFormsDesign method of the Foxit.FoxitReader.Ctl ActiveX object. This high-severity vulnerability (CVSS 7.8) requires user interaction, such as visiting a malicious page or opening a malicious file, to exploit, allowing an attacker to execute arbitrary code in the context of the current process. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.