Read the docs

Foxit

Records917All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high716CVSS 7.0–8.9

Exploited now

Foxit records in CISA KEV

No Foxit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

917 records

Priority HIGH 82

Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the npFoxitReaderPlugin.dll module.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.01612 Published 2025-08-05 No fix listed CWE-121
TI-2021-13823 CVE-2021-34833 · GHSA-8467-f3pr-377c

Use after free in Foxit PDF Reader

Priority HIGH 78

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.95655 Published 2021-08-04 No fix listed CWE-416
TI-2024-33074 CVE-2024-49576 · GHSA-rx5r-j988-cf3j

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01144 Published 2024-12-18 No fix listed CWE-416
TI-2024-32078 CVE-2024-47810 · GHSA-rxw7-8x7q-4w97

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01272 Published 2024-12-18 No fix listed CWE-416
TI-2024-19083 CVE-2024-28888 · GHSA-v876-7vq8-2gf7

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02199 Published 2024-10-02 No fix listed CWE-416
TI-2024-17038 CVE-2024-25938 · GHSA-j2pc-7gx6-cg8h

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.15639 Published 2024-04-30 No fix listed CWE-416
TI-2024-16876 CVE-2024-25648 · GHSA-c32x-wpfc-fr3r

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.15639 Published 2024-04-30 No fix listed CWE-416
TI-2024-16809 CVE-2024-25575 · GHSA-w6hh-2vxj-xw69

Type confusion in Foxit Reader

Priority HIGH 73

A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17716 Published 2024-04-30 No fix listed CWE-843
TI-2023-19948 CVE-2023-38573 · GHSA-vxxj-38m8-46gm

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01907 Published 2023-11-27 No fix listed CWE-416
TI-2023-16748 CVE-2023-33876 · GHSA-8pc7-j27m-5m6c

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00956 Published 2023-07-19 No fix listed CWE-416
TI-2023-16738 CVE-2023-33866 · GHSA-gwxm-q3h3-f3mv

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00922 Published 2023-07-19 No fix listed CWE-416
TI-2023-15941 CVE-2023-32664 · GHSA-xpg9-vvh4-vqjv

Type confusion in Foxit Reader

Priority HIGH 73

A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00997 Published 2023-07-19 No fix listed CWE-843
TI-2023-13256 CVE-2023-28744 · GHSA-2wwf-v36q-j2m3

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00922 Published 2023-07-19 No fix listed CWE-416
Priority HIGH 73

A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01795 Published 2022-02-04 No fix listed CWE-460
TI-2021-17484 CVE-2021-40420 · GHSA-fp63-vpqm-jj5g

Use after free in Foxit

Priority HIGH 73

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04687 Published 2022-02-04 No fix listed CWE-416
TI-2018-07063 CVE-2018-9958 · GHSA-6v4r-gv8g-8w3c

Use after free in Foxit Reader

Priority HIGH 73

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.61707 Published 2018-05-17 No fix listed CWE-416
TI-2022-19019 CVE-2022-40129 · GHSA-gx78-c5g9-f5hm

Use after free in Foxit Reader

Priority HIGH 69

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01568 Published 2022-11-21 No fix listed CWE-416
TI-2022-17406 CVE-2022-37332 · GHSA-mj2m-5322-9hcv

Use after free in Foxit Reader

Priority HIGH 69

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02261 Published 2022-11-21 No fix listed CWE-416
TI-2022-14317 CVE-2022-32774 · GHSA-j49r-89v5-ghwr

Use after free in Foxit Reader

Priority HIGH 69

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01568 Published 2022-11-21 No fix listed CWE-416
TI-2021-13837 CVE-2021-34847 · GHSA-35mj-mc7c-rc4m

Use after free in Foxit PDF Reader

Priority HIGH 69

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.61554 Published 2021-08-04 No fix listed CWE-416
TI-2018-02892 CVE-2018-3924 · GHSA-gqjx-6w9v-wr78

Use after free in Foxit

Priority HIGH 67

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.43715 Published 2018-08-01 No fix listed CWE-416
Load more
Open these records in search →