Home/Product/foxit pdf reader
Product

foxit pdf reader

320 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2026-5943
< 2026.1.1
Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts tr
7.8HIGH
 CVE-2026-5942
< 2026.1.1
Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent
5.5MEDIUM
 CVE-2026-5941
< 2026.1.1
Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarch
7.8HIGH
 CVE-2026-5940
< 2026.1.1
Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to pr
7.8HIGH
 CVE-2026-5939
< 2026.1.1
A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and r
5.5MEDIUM
 CVE-2026-5938
< 2026.1.1
Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resultin
5.5MEDIUM
 CVE-2026-5937
< 2026.1.1
Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::inval
5.5MEDIUM
 CVE-2026-3780
<= 2025.3.0.35737
The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths th
7.3HIGH
 CVE-2026-3779
<= 2025.3.0.35737
The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-creat
7.8HIGH
 CVE-2026-3778
<= 2025.3.0.35737
The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF. When pages and ann
6.2MEDIUM
 CVE-2026-3777
<= 2025.3.0.35737
The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the
5.5MEDIUM
 CVE-2026-3776
<= 2025.3.0.35737
The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources. When
5.5MEDIUM
 CVE-2026-3775
<= 2025.3.0.35737
The application's update service, when checking for updates, loads certain system libraries from a search path that includes direc
7.8HIGH
 CVE-2026-3774
<= 2025.3.0.35737
The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations,
4.7MEDIUM
 CVE-2025-66499
<= 2025.2.1.33197
A heap-based buffer overflow vulnerability exists in the PDF parsing of Foxit PDF Reader when processing specially crafted JBIG2 d
7.8HIGH
 CVE-2025-66498
<= 2025.2.1.33197
A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking whe
5.3MEDIUM
 CVE-2025-66497
<= 2025.2.1.33197
A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking whe
5.3MEDIUM
 CVE-2025-66496
<= 2025.2.1.33197
A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking whe
5.3MEDIUM
 CVE-2025-66495
<= 2025.2.1.33197
A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Window
7.8HIGH
 CVE-2025-66494
<= 2025.2.1.33197
A use-after-free vulnerability exists in the PDF file parsing of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows.
7.8HIGH
 CVE-2025-66493
<= 2025.2.1.33197
A use-after-free vulnerability exists in the AcroForm handling of Foxit PDF Reader and Foxit PDF Editor before 2025.2.1,14.0.1 and
7.8HIGH
 CVE-2025-13941
<= 2025.2.1.33197
A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incor
8.8HIGH
 CVE-2025-59803
<= 2025.2.0.68868
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers. An attacker can embed triggers (e.g., JavaScrip
5.3MEDIUM
 CVE-2025-59802
<= 2025.2.0.68868
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups (OCG) are supported, th
7.5HIGH
 CVE-2025-55314
<= 2025.1.0.27937
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. When pages in a PDF are
7.8HIGH
 CVE-2025-55313
<= 2025.1.0.27937
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. They allow potential arb
7.8HIGH
 CVE-2025-55312
<= 2025.1.0.66692
An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. When pages in a PDF are deleted vi
7.8HIGH
 CVE-2025-55311
<= 2025.1.0.66692
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can use Ja
6.5MEDIUM
 CVE-2025-55310
<= 2025.1.0.66692
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alte
7.3HIGH
 CVE-2025-55309
<= 2025.1.0.66692
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can contai
6.7MEDIUM
 CVE-2025-55308
<= 2025.1.0.27937
An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScrip
6.7MEDIUM
 CVE-2025-55307
<= 2025.1.0.27937
An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. Opening a malicious PDF containing
3.3LOW
 CVE-2025-9330
<= 2025.1.0.27937
Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allo
7.8HIGH
 CVE-2025-9329
< 2025.1.0.27937
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attacke
7.8HIGH
 CVE-2025-9328
< 2025.1.0.27937
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attacke
7.8HIGH
 CVE-2025-9327
< 2025.1.0.27937
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
5.5MEDIUM
 CVE-2025-9326
< 2025.1.0.27937
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attacke
7.8HIGH
 CVE-2025-9325
< 2025.1.0.27937
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
5.5MEDIUM
 CVE-2025-9324
< 2025.1.0.27937
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
5.5MEDIUM
 CVE-2025-9323
< 2025.1.0.27937
Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
5.5MEDIUM
 CVE-2025-32451
all versions
A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially cr
8.8HIGH
 CVE-2024-12753
<= 2024.3.0.26795
Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate pr
7.3HIGH
 CVE-2024-12752
<= 2024.3.0.26795
Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exe
7.8HIGH
 CVE-2024-12751
<= 2024.3.0.26795
Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex
7.8HIGH
 CVE-2024-49576
<= 2024.3.0.26795
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially cra
8.8HIGH
 CVE-2024-47810
<= 2024.3.0.26795
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascr
8.8HIGH
 CVE-2024-9256
<= 2024.2.3.25184
Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d
7.1HIGH
 CVE-2024-9255
<= 2024.2.3.25184
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2024-9254
<= 2024.2.2.64388
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
8.8HIGH
 CVE-2024-9253
<= 2024.2.3.25184
Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d
7.1HIGH
 CVE-2024-9252
<= 2024.2.3.25184
Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to discl
7.8HIGH
 CVE-2024-9251
<= 2024.2.3.25184
Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to dis
7.8HIGH
 CVE-2024-9250
<= 2024.2.3.25184
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-9249
<= 2024.2.3.25184
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attacke
7.1HIGH
 CVE-2024-9248
<= 2024.2.3.25184
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attack
7.8HIGH
 CVE-2024-9247
<= 2024.2.3.25184
Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to
7.8HIGH
 CVE-2024-9246
<= 2024.2.3.25184
Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to
7.1HIGH
 CVE-2024-9245
<= 2024.2.3.25184
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allow
7.8HIGH
 CVE-2024-9244
<= 2024.2.3.25184
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allow
7.8HIGH
 CVE-2024-9243
<= 2024.2.2.64388
Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex
7.8HIGH
 CVE-2024-28888
all versions
A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted
8.8HIGH
 CVE-2024-7725
< 2024.2.3.25184
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
8.8HIGH
 CVE-2024-7724
< 2024.2.3.25184
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
8.8HIGH
 CVE-2024-7723
< 2024.2.3.25184
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
8.8HIGH
 CVE-2024-7722
< 2024.2.3.25184
Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to dis
4.3MEDIUM
 CVE-2024-29072
<= 2024.2.1.25153
A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certifica
8.2HIGH
 CVE-2021-34976
<= 11.0.1.49938
Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers
5.5MEDIUM
 CVE-2021-34975
<= 11.0.1.49938
Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers
7.8HIGH
 CVE-2021-34974
<= 11.0.1.49938
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2021-34973
<= 11.0.1.49938
Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers
5.5MEDIUM
 CVE-2021-34972
<= 11.0.1.49938
Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to discl
5.5MEDIUM
 CVE-2021-34971
<= 11.0.1.49938
Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows re
7.8HIGH
 CVE-2021-34970
<= 11.0.1.49938
Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability. This vulnerability
5.5MEDIUM
 CVE-2021-34969
<= 11.0.1.49938
Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to dis
5.5MEDIUM
 CVE-2021-34968
<= 11.0.1.49938
Foxit PDF Editor transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers
7.8HIGH
 CVE-2021-34967
<= 11.0.1.49938
Foxit PDF Editor Line Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to
7.8HIGH
 CVE-2021-34966
<= 11.0.1.49938
Foxit PDF Editor FileAttachment Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote at
7.8HIGH
 CVE-2021-34965
<= 11.0.1.49938
Foxit PDF Editor Squiggly Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacker
7.8HIGH
 CVE-2021-34964
<= 11.0.1.49938
Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers
7.8HIGH
 CVE-2021-34963
<= 11.0.1.49938
Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacker
7.8HIGH
 CVE-2021-34962
<= 11.0.1.49938
Foxit PDF Editor Caret Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
7.8HIGH
 CVE-2021-34961
<= 11.0.1.49938
Foxit PDF Editor Ink Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to
7.8HIGH
 CVE-2021-34960
<= 11.0.1.49938
Foxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers
7.8HIGH
 CVE-2021-34959
<= 11.0.1.49938
Foxit PDF Editor Square Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers
7.8HIGH
 CVE-2021-34958
<= 11.0.1.49938
Foxit PDF Editor Text Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to
7.8HIGH
 CVE-2021-34957
<= 11.0.1.49938
Foxit PDF Editor Highlight Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacke
7.8HIGH
 CVE-2021-34956
<= 11.0.1.49938
Foxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacke
7.8HIGH
 CVE-2021-34955
<= 11.0.1.49938
Foxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
7.8HIGH
 CVE-2021-34954
<= 11.0.1.49938
Foxit PDF Editor StrikeOut Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacke
7.8HIGH
 CVE-2021-34953
<= 11.0.1.49938
Foxit PDF Reader Annotation Use of Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote at
7.8HIGH
 CVE-2021-34952
<= 11.0.1.49938
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2021-34951
<= 11.0.1.49938
Foxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote a
3.3LOW
 CVE-2021-34950
<= 11.0.1.49938
Foxit PDF Reader Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to
7.8HIGH
 CVE-2021-34949
<= 11.0.1.49938
Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to
5.5MEDIUM
 CVE-2021-34948
<= 11.0.1.49938
Foxit PDF Reader Square Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers
7.8HIGH
 CVE-2023-51562
<= 2023.2.0.21408
Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d
3.3LOW
 CVE-2023-51561
<= 2023.2.0.21408
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
5.5MEDIUM
 CVE-2023-51560
<= 2023.2.0.21408
Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2023-51559
<= 2023.2.0.21408
Foxit PDF Reader Doc Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute
3.3LOW
 CVE-2023-51558
<= 2023.2.0.21408
Foxit PDF Reader AcroForm Doc Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers
3.3LOW
 CVE-2023-51557
<= 2023.2.0.21408
Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex
7.8HIGH
 CVE-2023-51556
<= 2023.2.0.21408
Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex
7.8HIGH
 CVE-2023-51555
<= 2023.2.0.21408
Foxit PDF Reader Doc Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclo
3.3LOW
 CVE-2023-51554
<= 2023.2.0.21408
Foxit PDF Reader Signature Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disc
3.3LOW
 CVE-2023-51553
<= 2023.2.0.21408
Foxit PDF Reader Bookmark Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d
3.3LOW
 CVE-2023-51552
<= 2023.2.0.21408
Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers
7.8HIGH
 CVE-2023-51551
<= 2023.2.0.21408
Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers
7.8HIGH
 CVE-2023-51550
<= 2023.2.0.21408
Foxit PDF Reader combobox Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d
3.3LOW
 CVE-2023-51549
<= 2023.2.0.21408
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacker
7.8HIGH
 CVE-2023-42098
<= 12.1.3.15356
Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to dis
3.3LOW
 CVE-2023-42097
<= 12.1.3.15356
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2023-42096
<= 12.1.3.15356
Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
7.8HIGH
 CVE-2023-42095
<= 12.1.3.15356
Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d
3.3LOW
 CVE-2023-42094
<= 12.1.3.15356
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2023-42093
<= 12.1.3.15356
Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to dis
3.3LOW
 CVE-2023-42092
<= 12.1.3.15356
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2023-42091
<= 12.1.3.15356
Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to
7.8HIGH
 CVE-2023-42090
<= 12.1.3.15356
Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attacker
7.1HIGH
 CVE-2023-42089
<= 12.1.3.15356
Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disc
7.8HIGH
 CVE-2023-38119
<= 12.1.2.15332
Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attac
7.8HIGH
 CVE-2023-38118
<= 12.1.2.15332
Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote att
7.8HIGH
 CVE-2023-38117
<= 12.1.2.15332
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacker
7.8HIGH
 CVE-2023-38116
<= 12.1.2.15332
Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to
3.3LOW
 CVE-2023-38115
<= 12.1.2.15332
Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d
3.3LOW
 CVE-2023-38114
<= 12.1.2.15332
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacker
7.8HIGH
 CVE-2023-38113
<= 12.1.2.15332
Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to dis
3.3LOW
 CVE-2023-38112
<= 12.1.2.15332
Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to
7.8HIGH
 CVE-2023-38111
<= 12.1.2.15332
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2023-38110
<= 12.1.2.15332
Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote att
3.3LOW
 CVE-2023-38109
<= 12.1.2.15332
Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to
3.3LOW
 CVE-2023-38108
<= 12.1.2.15332
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
3.3LOW
 CVE-2023-38107
<= 12.1.2.15332
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2023-38106
<= 12.1.2.15332
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
3.3LOW
 CVE-2023-38105
<= 12.1.2.15332
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
3.3LOW
 CVE-2023-27366
< 12.1.1.15289
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2023-27365
< 12.1.1.15289
Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote a
7.8HIGH
 CVE-2023-27364
< 12.1.1.15289
Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote a
7.8HIGH
 CVE-2023-27363
< 12.1.1.15289
Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote atta
7.8HIGH
 CVE-2023-27331
< 12.1.0.15250
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2023-27330
< 12.1.0.15250
Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to
7.8HIGH
 CVE-2023-27329
< 12.1.0.15250
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2024-25938
all versions
A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScr
8.8HIGH
 CVE-2024-25648
all versions
A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaSc
8.8HIGH
 CVE-2024-25575
all versions
A type confusion vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially craf
8.8HIGH
 CVE-2024-32488
< 2023.3.0.23028
In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions
7.8HIGH
 CVE-2024-30366
< 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30334
< 2023.3.0.23028
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2024-30333
< 2023.3.0.23028
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2024-30332
< 2023.3.0.23028
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2024-30331
< 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30330
< 2023.3.0.23028
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30329
< 2023.3.0.23028
Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to dis
3.3LOW
 CVE-2024-30328
<= 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30327
<= 2023.3.0.63083
Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30326
<= 2023.3.0.23028
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2024-30325
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30324
<= 2023.3.0.63083
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2024-30323
<= 2023.3.0.23028
Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex
7.8HIGH
 CVE-2024-30322
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30371
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30367
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30365
<= 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30364
<= 2023.3.0.23028
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
3.3LOW
 CVE-2024-30363
<= 2023.3.0.63083
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
5.5MEDIUM
 CVE-2024-30362
<= 2023.3.0.63083
Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers t
7.8HIGH
 CVE-2024-30361
<= 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30360
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30359
<= 2023.3.0.23028
Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to
7.8HIGH
 CVE-2024-30358
<= 2023.3.0.23028
Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu
7.8HIGH
 CVE-2024-30357
<= 2023.3.0.63083
Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attacker
7.8HIGH
 CVE-2024-30356
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to d
3.3LOW
 CVE-2024-30355
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e
7.8HIGH
 CVE-2024-30354
<= 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30353
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex
7.8HIGH
 CVE-2024-30352
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30351
<= 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30350
<= 2023.3.0.23028
Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to
3.3LOW
 CVE-2024-30349
<= 2023.3.0.23028
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attack
7.8HIGH
 CVE-2024-30348
<= 2023.3.0.63083
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attack
7.8HIGH
 CVE-2024-30347
< 2023.3.0.23028
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attack
3.3LOW
 CVE-2024-30346
<= 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30345
<= 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30344
>= 2023.2.0.21408 and <= 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30343
<= 2023.3.0.63083
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2024-30342
<= 2023.3.0.63083
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2024-30341
< 2023.3.0.23028
Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to
7.8HIGH
 CVE-2024-30340
<= 2023.3.0.23028
Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to
3.3LOW
 CVE-2024-30339
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30338
<= 2023.3.0.23028
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec
7.8HIGH
 CVE-2024-30337
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30336
<= 2023.3.0.63083
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut
7.8HIGH
 CVE-2024-30335
<= 2023.3.0.23028
Foxit PDF Reader AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote att
7.1HIGH
 CVE-2024-25858
< 2024.4
In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimize
8.4HIGH
 CVE-2020-35990
<= 10.1.0.37527
Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.
5.5MEDIUM
 CVE-2023-33876
all versions
A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javas
8.8HIGH
 CVE-2023-33866
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematur
8.8HIGH
 CVE-2023-32664
all versions
A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. Specially
8.8HIGH
 CVE-2023-28744
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially c
8.8HIGH
 CVE-2023-27379
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematur
8.8HIGH
 CVE-2023-33240
<= 12.1.1.15289
Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and al
7.8HIGH
 CVE-2023-27769
all versions
An issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to execute arbitrary commands via the
7.8HIGH
 CVE-2022-43649
< 12.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.2.12465. U
7.8HIGH
 CVE-2022-43641
< 12.0.2
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.
7.8HIGH
 CVE-2022-43640
< 12.0.2
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.
5.5MEDIUM
 CVE-2022-43639
< 12.0.2
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. U
7.8HIGH
 CVE-2022-43638
< 12.0.2
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. U
7.8HIGH
 CVE-2022-43637
< 12.0.2
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. U
7.8HIGH
 CVE-2022-37391
< 12.0.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. U
7.8HIGH
 CVE-2022-37390
< 12.0.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. U
7.8HIGH
 CVE-2022-37389
< 12.0.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. U
7.8HIGH
 CVE-2022-37388
< 12.0.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. U
7.8HIGH
 CVE-2022-37387
< 12.0.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. U
7.8HIGH
 CVE-2022-37386
< 12.0.1
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.
5.5MEDIUM
 CVE-2022-37385
< 12.0.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-37384
< 12.0.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-37383
< 12.0.1
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.
5.5MEDIUM
 CVE-2022-37382
< 12.0.1
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.
5.5MEDIUM
 CVE-2022-37381
< 12.0.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti
7.8HIGH
 CVE-2022-37380
< 12.0.1
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.
5.5MEDIUM
 CVE-2022-37379
< 12.0.1
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.
5.5MEDIUM
 CVE-2022-37378
< 12.0.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537. U
7.8HIGH
 CVE-2022-37377
< 12.0.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;.
7.8HIGH
 CVE-2022-37376
< 12.0.1
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Editor 11.1.1.
3.3LOW
 CVE-2022-24908
< 11.2.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
7.8HIGH
 CVE-2022-24907
< 11.2.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
7.8HIGH
 CVE-2022-47881
<= 11.2.1.53537
Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.
6.5MEDIUM
 CVE-2022-40129
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-c
7.8HIGH
 CVE-2022-38097
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurel
7.8HIGH
 CVE-2022-37332
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-c
7.8HIGH
 CVE-2022-32774
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurel
7.8HIGH
 CVE-2022-25641
>= 11.0 and < 11.2.2
Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information d
5.5MEDIUM
 CVE-2021-41785
>= 11.0 and < 11.1
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free
7.8HIGH
 CVE-2021-41784
>= 11.0 and < 11.1
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free
7.8HIGH
 CVE-2021-41783
>= 11.0 and < 11.1
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free
7.8HIGH
 CVE-2021-41782
>= 11.0 and < 11.1
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free
7.8HIGH
 CVE-2021-41781
>= 11.0 and < 11.1
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free
7.8HIGH
 CVE-2021-41780
>= 11.0 and < 11.1
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free
7.8HIGH
 CVE-2021-40326
>= 11.0 and < 11.1
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in si
5.5MEDIUM
 CVE-2022-26979
< 12.0.1
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for oState of
7.5HIGH
 CVE-2022-27944
< 12.0.1
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference.
7.5HIGH
 CVE-2022-34875
<= 11.2.2.53575
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.
3.3LOW
 CVE-2022-34874
<= 11.2.2.53575
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.
3.3LOW
 CVE-2022-34873
<= 11.2.2.53575
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.
3.3LOW
 CVE-2022-28683
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28682
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28681
<= 11.2.1.53537
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.
6.1MEDIUM
 CVE-2022-28679
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28678
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28677
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28676
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28675
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28674
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28673
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28672
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28671
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-28670
<= 11.2.1.53537
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.
7.8HIGH
 CVE-2022-28669
<= 11.2.1.53537
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. U
7.8HIGH
 CVE-2022-30557
< 11.2.2
Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling du
7.5HIGH
 CVE-2022-27359
< 12.0.1
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference.
5.5MEDIUM
 CVE-2022-25108
< 11.2.1
Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because
5.5MEDIUM
 CVE-2022-24971
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24370
< 11.1.0.0925
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit r
6.5MEDIUM
 CVE-2022-24369
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24368
<= 11.1.0.52543
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.1.0.
6.5MEDIUM
 CVE-2022-24367
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24366
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24365
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24364
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24363
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24362
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24361
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24360
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24359
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24358
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24357
<= 11.1.0.52543
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. U
8.8HIGH
 CVE-2022-24356
< 11.1.0.0925
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader Foxit reader 11
8.8HIGH
 CVE-2022-24955
<= 11.1.0.52543
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.
9.8CRITICAL
 CVE-2022-24954
<= 11.1.0.52543
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subf
9.8CRITICAL
 CVE-2022-22150
all versions
A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specia
8.8HIGH
 CVE-2021-40420
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially
8.8HIGH
 CVE-2021-45980
< 11.1
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript
7.8HIGH
 CVE-2021-45979
< 11.1
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the Jav
7.8HIGH
 CVE-2021-45978
< 11.1
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the
7.8HIGH
 CVE-2021-38567
<= 11.0.0.0510
An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary
7.5HIGH
 CVE-2021-38566
< 11.0.1
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursi
7.5HIGH
 CVE-2021-38565
< 11.0.1
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via s
7.5HIGH
 CVE-2021-38564
< 11.0.1
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.s
9.1CRITICAL
 CVE-2021-38563
<= 11.0.0.0510
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array
9.8CRITICAL
 CVE-2021-21893
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.0.0.49893. A specially
8.8HIGH
 CVE-2021-21870
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A specially
8.8HIGH
 CVE-2021-21831
all versions
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially
8.8HIGH
 CVE-2021-34853
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34852
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34851
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34850
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34849
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34848
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34847
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34846
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34845
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34844
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34843
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34842
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34841
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34840
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34839
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34838
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34837
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34836
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34835
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34834
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34833
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34832
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. U
7.8HIGH
 CVE-2021-34831
<= 11.0.0.49893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.4.37651. User
7.8HIGH
 CVE-2018-3850
all versions
An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. A
8.8HIGH
 CVE-2017-14458
all versions
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 8.3.2.250
8.8HIGH
 CVE-2013-0732
<= 7.0
Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via c
 CVE-2013-0113
all versions
Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memor
 CVE-2010-5209
all versions
Multiple untrusted search path vulnerabilities in Nuance PDF Reader 6.0 allow local users to gain privileges via a Trojan horse (1
 CVE-2007-2186
all versions
Foxit Reader 2.0 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin