Browse CVEs

HIGH 8.8 CVE-2023-41257 A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript code insid… Foxit Reader Mitigation only Fix from $1,9502023-11-27 HIGH 8.8 CVE-2023-38573 A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code inside a ma… Foxit Reader No fix yet Fix from $1,9502023-11-27 HIGH 8.8 CVE-2023-39542 A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitr… Foxit Reader No fix yet Fix from $1,9502023-11-27 HIGH 8.8 CVE-2023-40194 An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace… Foxit Reader No fix yet Fix from $1,9502023-11-27 HIGH 8.8 CVE-2023-35985 An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly vali… Foxit Reader No fix yet Fix from $1,9502023-11-27 HIGH 8.8 CVE-2023-32616 A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malic… Foxit Reader No fix yet Fix from $1,9502023-11-27 HIGH 7.8 CVE-2022-43310 An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching fo… Foxit Reader 11.2.118.51569+ Fix from $1,9502022-11-09 CRITICAL 9.8 CVE-2021-38574 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string. Foxit Reader 10.1.4+ Fix from $2,3002021-08-11 CRITICAL 9.8 CVE-2021-38568 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different … Foxit Reader 10.1.4+ Fix from $2,3002021-08-11 CRITICAL 9.8 CVE-2021-38572 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not v… Foxit Reader 10.1.4+ Fix from $2,3002021-08-11 CRITICAL 9.8 CVE-2021-38573 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not val… Foxit Reader 10.1.4+ Fix from $2,3002021-08-11 CRITICAL 9.1 CVE-2021-38564 An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand. Pdf Editor 11.0.1+ Fix from $2,3002021-08-11 CRITICAL 9.1 CVE-2021-38570 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a sym… Foxit Reader 10.1.4+ Fix from $2,3002021-08-11 HIGH 7.8 CVE-2021-38571 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502. Foxit Reader 9.7.5.29616 / 10.1.4+ Fix from $1,9502021-08-11 HIGH 7.5 CVE-2021-38565 An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm. Pdf Editor 11.0.1+ Fix from $1,9502021-08-11 HIGH 7.5 CVE-2021-38566 An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of em… Pdf Editor 11.0.1+ Fix from $1,9502021-08-11 HIGH 7.5 CVE-2021-38569 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of… Foxit Reader 10.1.4+ Fix from $1,9502021-08-11 CRITICAL 9.8 CVE-2021-33793 Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office doc… Foxit Reader 10.1.4+ Fix from $2,3002021-08-11 CRITICAL 9.1 CVE-2021-33794 Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA… Foxit Reader 10.1.4+ Fix from $2,3002021-08-11 HIGH 7.8 CVE-2021-33792 Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary. Foxit Reader 10.1.4+ Fix from $1,9502021-07-09 MEDIUM 5.5 CVE-2021-33795 Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and s… Foxit Reader 10.1.4+ Fix from $1,6002021-07-09 HIGH 7.8 CVE-2021-31476EPSS 6% This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is … Foxit Reader after 10.1.3.37598 Fix from $1,9502021-06-16 HIGH 7.8 CVE-2021-31473EPSS 6% This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is requ… Phantompdf after 10.1.3.37598 Fix from $1,9502021-05-21 HIGH 8.8 CVE-2021-21822 A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document… Foxit Reader No fix yet Fix from $1,9502021-05-10 HIGH 7.8 CVE-2021-31458 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is requ… Phantompdf after 10.1.37598 Fix from $1,9502021-05-07 HIGH 7.8 CVE-2021-31459 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is requ… Phantompdf after 10.1.3.37598 Fix from $1,9502021-05-07 HIGH 7.8 CVE-2021-31460 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is requ… Phantompdf after 10.1.37598 Fix from $1,9502021-05-07 HIGH 7.8 CVE-2021-31461 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is requ… Phantompdf after 10.1.3.37598 Fix from $1,9502021-05-07 HIGH 7.8 CVE-2021-31465 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is requ… 3d after 10.1.3.37598 Fix from $1,9502021-05-07 HIGH 7.8 CVE-2021-31466 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is requ… 3d after 10.1.3.37598 Fix from $1,9502021-05-07