Read the docs

Foxitsoftware

Records797All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical44CVSS 9.0–10.0
CVSS high620CVSS 7.0–8.9

Exploited now

Foxitsoftware records in CISA KEV

No Foxitsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phantompdf 549 records HIGH Foxit Reader 372 records HIGH Reader 259 records HIGH Foxit Studio Photo 54 records MEDIUM Pdf Editor 28 records HIGH 3d 20 records MEDIUM Foxit Pdf Sdk Activex 10 records MEDIUM U3d 9 records MEDIUM

Records

372 records in Foxit Reader · all components

TI-2020-10635 CVE-2020-13557 · GHSA-cpxg-5m58-xm8c

Use after free in Foxit

Priority HIGH 75

A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.70295 Published 2020-12-22 No fix listed CWE-416
TI-2020-10626 CVE-2020-13548 · GHSA-5fx6-f253-w3m2

Use after free in Foxit

Priority HIGH 74

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.65804 Published 2021-02-10 No fix listed CWE-416
TI-2023-19948 CVE-2023-38573 · GHSA-vxxj-38m8-46gm

Use after free in Foxit Reader

Priority HIGH 73

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01907 Published 2023-11-27 No fix listed CWE-416
TI-2018-07063 CVE-2018-9958 · GHSA-6v4r-gv8g-8w3c

Use after free in Foxit Reader

Priority HIGH 73

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.61707 Published 2018-05-17 No fix listed CWE-416
TI-2018-02892 CVE-2018-3924 · GHSA-gqjx-6w9v-wr78

Use after free in Foxit

Priority HIGH 67

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.43715 Published 2018-08-01 No fix listed CWE-416
TI-2018-07053 CVE-2018-9948 · GHSA-589f-765p-q2h4

Information disclosure in Foxit Reader

Priority MEDIUM 64

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.62491 Published 2018-05-17 No fix listed CWE-824
TI-2018-02813 CVE-2018-3843 · GHSA-m673-jrm2-q2fh

Incorrect type conversion in Talos Foxit

Priority MEDIUM 57

An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotations.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.21557 Published 2018-04-19 No fix listed CWE-704
TI-2016-03167 CVE-2016-3740 · GHSA-7w5w-v49g-pq2m

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll…

Priority MEDIUM 50

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF imag…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.15363 Published 2017-04-04 No fix listed CWE-119
TI-2018-10243 CVE-2018-14295 · GHSA-jgvf-rg2h-x75x

Integer overflow in Foxit PhantomPDF

Priority MEDIUM 49

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.08784 Published 2018-07-31 No fix listed CWE-190
TI-2009-00660 CVE-2009-0691 · GHSA-76ch-p3g6-5mg2

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before…

Priority MEDIUM 49

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to c…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05658 Published 2009-06-23 No fix listed CWE-399
TI-2009-00659 CVE-2009-0690 · GHSA-8mfv-v727-h99v

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before…

Priority MEDIUM 49

The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attac…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05658 Published 2009-06-23 No fix listed CWE-189
TI-2011-01684 CVE-2011-1908 · GHSA-x6jw-95g6-c4pf

Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before…

Priority MEDIUM 48

Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font i…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0498 Published 2011-06-24 No fix listed CWE-189
TI-2019-12790 CVE-2019-17139 · GHSA-pvg9-crmm-835x

Out-of-bounds write in Foxit PhantomPDF

Priority MEDIUM 47

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05783 Published 2019-10-25 No fix listed CWE-787
Load more
Open these records in search →