Priority HIGH 71
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execut…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.42884 · Published 2009-03-10 · No fix listed CWE-119
Priority MEDIUM 61
An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.46008 · Published 2019-01-30 · No fix listed CWE-125
Priority MEDIUM 55
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.23664 · Published 2020-02-13 · No fix listed CWE-190
Priority MEDIUM 53
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.19837 · Published 2020-02-13 · No fix listed CWE-416
Priority MEDIUM 53
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.19837 · Published 2020-02-13 · No fix listed CWE-416
Priority MEDIUM 52
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.19457 · Published 2020-02-13 · No fix listed CWE-416
Priority MEDIUM 50
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.24397 · Published 2019-01-24 · No fix listed CWE-125
Priority MEDIUM 48
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03176 · Published 2018-09-28 · No fix listed CWE-416
Priority MEDIUM 48
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03176 · Published 2018-09-28 · No fix listed CWE-416
Priority MEDIUM 48
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03176 · Published 2018-09-28 · No fix listed CWE-416
Priority MEDIUM 48
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03176 · Published 2018-09-28 · No fix listed CWE-416
Priority MEDIUM 48
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03176 · Published 2018-09-28 · No fix listed CWE-416
Priority MEDIUM 48
A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure.
CVSS 3.0MEDIUM 6.8· Network · No auth · User interaction · EPSS 0.18495 · Published 2017-01-06 · No fix listed CWE-125
Priority MEDIUM 47
An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.06013 · Published 2019-10-02 · No fix listed CWE-703
Priority MEDIUM 46
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01761 · Published 2020-06-04 · No fix listed CWE-416
Priority MEDIUM 46
An issue was discovered in Foxit Reader and PhantomPDF before 9.6.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01761 · Published 2020-06-04 · No fix listed CWE-787
Priority MEDIUM 46
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01761 · Published 2020-06-04 · No fix listed CWE-787
Priority MEDIUM 46
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.09482 · Published 2018-10-03 · No fix listed CWE-416
Priority MEDIUM 45
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.07678 · Published 2021-05-21 · No fix listed CWE-787
Priority MEDIUM 45
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0155 · Published 2020-06-04 · No fix listed CWE-307
Priority MEDIUM 45
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01649 · Published 2020-06-04 · No fix listed CWE-798
Priority MEDIUM 45
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.08313 · Published 2020-02-13 · No fix listed CWE-787
Priority MEDIUM 45
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.08243 · Published 2020-02-13 · No fix listed CWE-787
Priority MEDIUM 45
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.07711 · Published 2019-10-04 · No fix listed CWE-416
Priority MEDIUM 45
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.07711 · Published 2019-10-04 · No fix listed CWE-416
Load more