Foxit

Records917All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high716CVSS 7.0–8.9

Exploited now

Foxit records in CISA KEV

No Foxit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pdf Reader 373 records HIGH Pdf Editor 330 records HIGH Pdf Editor Cloud 9 records LOW Phantompdf 9 records LOW Esign 2 records LOW Ai 1 record LOW Pdf Editor For Mac 1 record LOW Pdf Services Api 1 record MEDIUM

Records

373 records in Pdf Reader · all components

TI-2021-13823 CVE-2021-34833 · GHSA-8467-f3pr-377c

Use after free in Foxit PDF Reader

HIGH 78

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.95655 Published 2021-08-04 No fix listed CWE-416

TI-2025-23518 CVE-2025-32451 · GHSA-6rrf-jvv2-v2hc

A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of…

HIGH 73

A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00651 Published 2025-08-13 No fix listed CWE-824

TI-2024-33074 CVE-2024-49576 · GHSA-rx5r-j988-cf3j

Use after free in Foxit Reader

HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01144 Published 2024-12-18 No fix listed CWE-416

TI-2024-32078 CVE-2024-47810 · GHSA-rxw7-8x7q-4w97

Use after free in Foxit Reader

HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01272 Published 2024-12-18 No fix listed CWE-416

TI-2024-19083 CVE-2024-28888 · GHSA-v876-7vq8-2gf7

Use after free in Foxit Reader

HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02199 Published 2024-10-02 No fix listed CWE-416

TI-2024-17038 CVE-2024-25938 · GHSA-j2pc-7gx6-cg8h

Use after free in Foxit Reader

HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.15639 Published 2024-04-30 No fix listed CWE-416

TI-2024-16876 CVE-2024-25648 · GHSA-c32x-wpfc-fr3r

Use after free in Foxit Reader

HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.15639 Published 2024-04-30 No fix listed CWE-416

TI-2024-16809 CVE-2024-25575 · GHSA-w6hh-2vxj-xw69

Type confusion in Foxit Reader

HIGH 73

A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17716 Published 2024-04-30 No fix listed CWE-843

TI-2023-16748 CVE-2023-33876 · GHSA-8pc7-j27m-5m6c

Use after free in Foxit Reader

HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00956 Published 2023-07-19 No fix listed CWE-416

TI-2023-16738 CVE-2023-33866 · GHSA-gwxm-q3h3-f3mv

Use after free in Foxit Reader

HIGH 73

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00922 Published 2023-07-19 No fix listed CWE-416

TI-2023-15941 CVE-2023-32664 · GHSA-xpg9-vvh4-vqjv

Type confusion in Foxit Reader

HIGH 73

A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00997 Published 2023-07-19 No fix listed CWE-843

TI-2023-13256 CVE-2023-28744 · GHSA-2wwf-v36q-j2m3

Use after free in Foxit Reader

HIGH 73

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00922 Published 2023-07-19 No fix listed CWE-416

TI-2022-06485 CVE-2022-22150 · GHSA-hgjw-m9c6-r5g4

Improper handling of exceptional conditions in Foxit

HIGH 73

A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01795 Published 2022-02-04 No fix listed CWE-460

TI-2021-17484 CVE-2021-40420 · GHSA-fp63-vpqm-jj5g

Use after free in Foxit

HIGH 73

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04687 Published 2022-02-04 No fix listed CWE-416

TI-2022-19019 CVE-2022-40129 · GHSA-gx78-c5g9-f5hm

Use after free in Foxit Reader

HIGH 69

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01568 Published 2022-11-21 No fix listed CWE-416

TI-2022-17406 CVE-2022-37332 · GHSA-mj2m-5322-9hcv

Use after free in Foxit Reader

HIGH 69

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02261 Published 2022-11-21 No fix listed CWE-416

TI-2022-14317 CVE-2022-32774 · GHSA-j49r-89v5-ghwr

Use after free in Foxit Reader

HIGH 69

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01568 Published 2022-11-21 No fix listed CWE-416

TI-2021-13837 CVE-2021-34847 · GHSA-35mj-mc7c-rc4m

Use after free in Foxit PDF Reader

HIGH 69

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.61554 Published 2021-08-04 No fix listed CWE-416

TI-2023-12098 CVE-2023-27363 · GHSA-phwf-pmc2-5cx4

Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution…

MEDIUM 64

Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.41957 Published 2024-05-03 No fix listed CWE-749

TI-2021-13840 CVE-2021-34850 · GHSA-2mfh-jhf2-vx33

Use after free in Foxit PDF Reader

MEDIUM 61

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.38251 Published 2021-08-04 No fix listed CWE-416

TI-2022-08753 CVE-2022-24954 · GHSA-j3w8-vh53-8rrp

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based…

MEDIUM 56

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11926 Published 2022-02-11 No fix listed CWE-787

TI-2021-13832 CVE-2021-34842 · GHSA-377q-mqhx-g9cp

Use after free in Foxit PDF Reader

MEDIUM 49

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.13346 Published 2021-08-04 No fix listed CWE-416

TI-2021-04876 CVE-2021-21831 · GHSA-52v6-wpr7-xp26

Use after free in Foxit

MEDIUM 47

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06133 Published 2021-08-05 No fix listed CWE-416

TI-2022-08754 CVE-2022-24955 · GHSA-c5f6-v2fm-qcrh

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled…

MEDIUM 44

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01052 Published 2022-02-11 No fix listed CWE-427

TI-2021-16158 CVE-2021-38563 · GHSA-w5rc-cq4p-9j77

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.

MEDIUM 44

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01087 Published 2021-08-11 No fix listed CWE-129

Open these records in search →

Critical	7
High	716
Medium	138
Low	56
No CVSS	0