CVE-2019-6768

CVE-2019-6768 is a remote code execution vulnerability affecting Foxit Reader 9.4.1.16828 and PhantomPDF, stemming from improper validation in the removeField method when processing AcroForms. This flaw allows an attacker to execute arbitrary code in the context of the current process if a user is tricked into visiting a malicious page or opening a malicious file. With a CVSS score of 7.8 (High), it requires user interaction and local access for exploitation, but can lead to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.