Priority MEDIUM 45
A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03769 · Published 2023-11-27 · No fix listed CWE-73
Priority HIGH 73
An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02001 · Published 2023-11-27 · No fix listed CWE-73
Priority HIGH 73
An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02673 · Published 2023-11-27 · No fix listed CWE-73
Priority MEDIUM 42
A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0182 · Published 2023-11-27 · No fix listed CWE-416
Priority MEDIUM 41
A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01627 · Published 2023-11-27 · No fix listed CWE-843
Priority HIGH 73
A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01907 · Published 2023-11-27 · No fix listed CWE-416
Priority LOW 39
An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01684 · Published 2022-11-09 · No fix listed CWE-427
Priority MEDIUM 44
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01087 · Published 2021-08-11 · No fix listed CWE-787
Priority LOW 35
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00961 · Published 2021-08-11 · No fix listed CWE-674
Priority MEDIUM 42
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01166 · Published 2021-08-11 · No fix listed CWE-59
Priority LOW 35
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00542 · Published 2021-08-11 · No fix listed CWE-427
Priority MEDIUM 44
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01117 · Published 2021-08-11 · No fix listed
Priority MEDIUM 44
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01117 · Published 2021-08-11 · No fix listed
Priority MEDIUM 44
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00994 · Published 2021-08-11 · No fix listed CWE-89
Priority MEDIUM 44
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01087 · Published 2021-08-11 · No fix listed CWE-787
Priority MEDIUM 41
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01105 · Published 2021-08-11 · No fix listed
Priority LOW 38
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02107 · Published 2021-07-09 · No fix listed CWE-787
Priority LOW 26
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00771 · Published 2021-07-09 · No fix listed CWE-755
Priority MEDIUM 45
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.08754 · Published 2021-06-16 · No fix listed CWE-843
Priority MEDIUM 42
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01758 · Published 2021-05-10 · No fix listed CWE-416
Priority LOW 39
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02761 · Published 2021-05-07 · No fix listed CWE-416
Priority MEDIUM 41
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.03971 · Published 2021-05-07 · No fix listed CWE-122
Priority MEDIUM 41
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04401 · Published 2021-05-07 · No fix listed CWE-416
Priority MEDIUM 42
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04635 · Published 2021-05-07 · No fix listed CWE-787
Priority MEDIUM 41
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04401 · Published 2021-05-07 · No fix listed CWE-416
Load more
THREATIST.IORead the docs