CVE-2020-26540

CVE-2020-26540 is a high-severity vulnerability affecting Foxit Reader and PhantomPDF on macOS versions prior to 4.1. The flaw stems from the absence of Hardened Runtime protection during code signing, enabling code injection or information leakage. With a CVSS score of 7.5, this vulnerability is easily exploitable over a network with no user interaction, potentially leading to a complete compromise of confidentiality. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered some community discussion and media coverage.