Priority HIGH 82
Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the npFoxitReaderPlugin.dll module.
CVSS 4.0CRITICAL 9.4· Network · No auth · User interaction · EPSS 0.01612 · Published 2025-08-05 · No fix listed CWE-121
Priority HIGH 82
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.75781 · Published 2009-03-10 · No fix listed CWE-119
Priority HIGH 78
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.95655 · Published 2021-08-04 · No fix listed CWE-416
Priority HIGH 73
A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00651 · Published 2025-08-13 · No fix listed CWE-824
Priority HIGH 73
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01144 · Published 2024-12-18 · No fix listed CWE-416
Priority HIGH 73
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01272 · Published 2024-12-18 · No fix listed CWE-416
Priority HIGH 73
A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02199 · Published 2024-10-02 · No fix listed CWE-416
Priority HIGH 73
A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.15639 · Published 2024-04-30 · No fix listed CWE-416
Priority HIGH 73
A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.15639 · Published 2024-04-30 · No fix listed CWE-416
Priority HIGH 73
A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.17716 · Published 2024-04-30 · No fix listed CWE-843
Priority HIGH 73
An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02001 · Published 2023-11-27 · No fix listed CWE-73
Priority HIGH 73
A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01907 · Published 2023-11-27 · No fix listed CWE-416
Priority HIGH 73
An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02673 · Published 2023-11-27 · No fix listed CWE-73
Priority HIGH 73
A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00956 · Published 2023-07-19 · No fix listed CWE-416
Priority HIGH 73
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00922 · Published 2023-07-19 · No fix listed CWE-416
Priority HIGH 73
A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00997 · Published 2023-07-19 · No fix listed CWE-843
Priority HIGH 73
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00922 · Published 2023-07-19 · No fix listed CWE-416
Priority HIGH 73
A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01795 · Published 2022-02-04 · No fix listed CWE-460
Priority HIGH 73
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04687 · Published 2022-02-04 · No fix listed CWE-416
Priority HIGH 73
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.61707 · Published 2018-05-17 · No fix listed CWE-416
Priority HIGH 69
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01568 · Published 2022-11-21 · No fix listed CWE-416
Priority HIGH 69
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02261 · Published 2022-11-21 · No fix listed CWE-416
Priority HIGH 69
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01568 · Published 2022-11-21 · No fix listed CWE-416
Priority HIGH 69
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.61554 · Published 2021-08-04 · No fix listed CWE-416
Priority HIGH 67
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.43715 · Published 2018-08-01 · No fix listed CWE-416
Load more