CVE-2019-6771

CVE-2019-6771 is a medium-severity information disclosure vulnerability affecting Foxit Reader and PhantomPDF on Windows, specifically versions 2019.010.20098 and earlier. The flaw, rooted in improper validation of Field object properties within AcroForms, allows a remote attacker to disclose sensitive information if a user opens a malicious file or visits a malicious page. While user interaction is required and the direct impact is information disclosure, it could be chained with other vulnerabilities for code execution. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.