Vulnerabilities

TI-2021-16163 CVE-2021-38568 · GHSA-h97p-mg45-m6vq

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

MEDIUM 44

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01087 Published 2021-08-11 No fix listed CWE-787

TI-2021-16164 CVE-2021-38569 · GHSA-q4qj-v923-5hmh

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

LOW 35

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00961 Published 2021-08-11 No fix listed CWE-674

TI-2021-16165 CVE-2021-38570 · GHSA-jc8j-6hpq-92wx

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

MEDIUM 42

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01166 Published 2021-08-11 No fix listed CWE-59

TI-2021-16166 CVE-2021-38571 · GHSA-95gh-f9p8-hgvj

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

LOW 35

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00542 Published 2021-08-11 No fix listed CWE-427

TI-2021-16167 CVE-2021-38572 · GHSA-j4gm-v3h2-cv35

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

MEDIUM 44

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01117 Published 2021-08-11 No fix listed

TI-2021-16168 CVE-2021-38573 · GHSA-ghjc-f7r9-q2f2

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

MEDIUM 44

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01117 Published 2021-08-11 No fix listed

TI-2021-16169 CVE-2021-38574 · GHSA-25fc-h2rg-wpc9

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

MEDIUM 44

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00994 Published 2021-08-11 No fix listed CWE-89

TI-2021-13160 CVE-2021-33793 · GHSA-mj9w-85gp-35pc

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write…

MEDIUM 44

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01087 Published 2021-08-11 No fix listed CWE-787

TI-2021-13161 CVE-2021-33794 · GHSA-c7q8-wf85-wcvw

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or…

MEDIUM 41

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01105 Published 2021-08-11 No fix listed

TI-2021-13159 CVE-2021-33792 · GHSA-v53r-f5mf-8x5c

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a…

LOW 38

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02107 Published 2021-07-09 No fix listed CWE-787

TI-2021-13162 CVE-2021-33795 · GHSA-58p3-3997-g6qm

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document…

LOW 26

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00771 Published 2021-07-09 No fix listed CWE-755

TI-2021-11605 CVE-2021-31476 · GHSA-x7vq-mpj3-3xg4

Type confusion in Foxit PhantomPDF

MEDIUM 45

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.08754 Published 2021-06-16 No fix listed CWE-843

TI-2021-11602 CVE-2021-31473 · GHSA-4979-gf54-x6mh

Out-of-bounds write in Foxit Reader

MEDIUM 45

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.07678 Published 2021-05-21 No fix listed CWE-787

TI-2021-11590 CVE-2021-31461 · GHSA-8cgq-mf9j-mhpv