Read the docs

Foxitsoftware

Records797All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical44CVSS 9.0–10.0
CVSS high620CVSS 7.0–8.9

Exploited now

Foxitsoftware records in CISA KEV

No Foxitsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phantompdf 549 records HIGH Foxit Reader 372 records HIGH Reader 259 records HIGH Foxit Studio Photo 54 records MEDIUM Pdf Editor 28 records HIGH 3d 20 records MEDIUM Foxit Pdf Sdk Activex 10 records MEDIUM U3d 9 records MEDIUM

Records

797 records

TI-2021-13823 CVE-2021-34833 · GHSA-8467-f3pr-377c

Use after free in Foxit PDF Reader

Priority HIGH 78

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.95655 Published 2021-08-04 No fix listed CWE-416
TI-2020-10635 CVE-2020-13557 · GHSA-cpxg-5m58-xm8c

Use after free in Foxit

Priority HIGH 75

A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.70295 Published 2020-12-22 No fix listed CWE-416
TI-2020-10626 CVE-2020-13548 · GHSA-5fx6-f253-w3m2

Use after free in Foxit

Priority HIGH 74

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.65804 Published 2021-02-10 No fix listed CWE-416
TI-2023-19948 CVE-2023-38573 · GHSA-vxxj-38m8-46gm

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01907 Published 2023-11-27 No fix listed CWE-416
TI-2018-07063 CVE-2018-9958 · GHSA-6v4r-gv8g-8w3c

Use after free in Foxit Reader

Priority HIGH 73

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.61707 Published 2018-05-17 No fix listed CWE-416
TI-2021-13837 CVE-2021-34847 · GHSA-35mj-mc7c-rc4m

Use after free in Foxit PDF Reader

Priority HIGH 69

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.61554 Published 2021-08-04 No fix listed CWE-416
TI-2018-14353 CVE-2018-20247 · GHSA-hg32-2wp3-5f7j

Stack-based buffer overflow in Foxit Quick PDF Library

Priority HIGH 67

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFromString or LoadFromStream functions res…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.54492 Published 2018-12-24 Fixed in 16.12 CWE-121
TI-2018-02892 CVE-2018-3924 · GHSA-gqjx-6w9v-wr78

Use after free in Foxit

Priority HIGH 67

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.43715 Published 2018-08-01 No fix listed CWE-416
TI-2018-07053 CVE-2018-9948 · GHSA-589f-765p-q2h4

Information disclosure in Foxit Reader

Priority MEDIUM 64

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.62491 Published 2018-05-17 No fix listed CWE-824
TI-2021-13840 CVE-2021-34850 · GHSA-2mfh-jhf2-vx33

Use after free in Foxit PDF Reader

Priority MEDIUM 61

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.38251 Published 2021-08-04 No fix listed CWE-416
TI-2018-02924 CVE-2018-3956 · GHSA-php8-5jrg-x8g2

Out-of-bounds read in Foxit

Priority MEDIUM 61

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.46008 Published 2019-01-30 No fix listed CWE-125
TI-2018-02813 CVE-2018-3843 · GHSA-m673-jrm2-q2fh

Incorrect type conversion in Talos Foxit

Priority MEDIUM 57

An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotations.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.21557 Published 2018-04-19 No fix listed CWE-704
TI-2020-07098 CVE-2020-8844 · GHSA-7554-j89c-fh4v

Integer overflow in Foxit Reader

Priority MEDIUM 55

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.23664 Published 2020-02-13 No fix listed CWE-190
TI-2008-06719 CVE-2008-7031 · GHSA-rj98-p7x9-pmrc

Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503…

Priority MEDIUM 54

Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08251 Published 2009-08-24 No fix listed CWE-119
TI-2020-07110 CVE-2020-8856 · GHSA-m87p-28g3-v6m6

Use after free in Foxit PhantomPDF

Priority MEDIUM 53

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.19837 Published 2020-02-13 No fix listed CWE-416
TI-2020-07100 CVE-2020-8846 · GHSA-9h36-xfgg-w797

Use after free in Foxit PhantomPDF

Priority MEDIUM 53

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.19837 Published 2020-02-13 No fix listed CWE-416
TI-2020-07099 CVE-2020-8845 · GHSA-m7q6-6cr7-23gp

Use after free in Foxit PhantomPDF

Priority MEDIUM 52

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.19457 Published 2020-02-13 No fix listed CWE-416
TI-2020-07135 CVE-2020-8881 · GHSA-xpc3-x4px-hc2c

Use after free in Foxit Studio Photo

Priority MEDIUM 51

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.11057 Published 2020-03-20 No fix listed CWE-416
Load more
Open these records in search →