Priority MEDIUM 45
A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03769 · Published 2023-11-27 · No fix listed CWE-73
Priority HIGH 73
An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02001 · Published 2023-11-27 · No fix listed CWE-73
Priority HIGH 73
An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02673 · Published 2023-11-27 · No fix listed CWE-73
Priority MEDIUM 42
A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0182 · Published 2023-11-27 · No fix listed CWE-416
Priority MEDIUM 41
A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01627 · Published 2023-11-27 · No fix listed CWE-843
Priority HIGH 73
A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01907 · Published 2023-11-27 · No fix listed CWE-416
Priority LOW 39
An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01684 · Published 2022-11-09 · No fix listed CWE-427
Priority MEDIUM 44
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01087 · Published 2021-08-11 · No fix listed CWE-129
Priority MEDIUM 41
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01087 · Published 2021-08-11 · No fix listed CWE-125
Priority LOW 34
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00848 · Published 2021-08-11 · No fix listed
Priority LOW 35
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00961 · Published 2021-08-11 · No fix listed CWE-674
Priority LOW 35
An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00988 · Published 2021-08-11 · No fix listed CWE-476
Priority MEDIUM 44
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01087 · Published 2021-08-11 · No fix listed CWE-787
Priority LOW 35
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00961 · Published 2021-08-11 · No fix listed CWE-674
Priority MEDIUM 42
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01166 · Published 2021-08-11 · No fix listed CWE-59
Priority LOW 35
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00542 · Published 2021-08-11 · No fix listed CWE-427
Priority MEDIUM 44
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01117 · Published 2021-08-11 · No fix listed
Priority MEDIUM 44
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01117 · Published 2021-08-11 · No fix listed
Priority MEDIUM 44
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00994 · Published 2021-08-11 · No fix listed CWE-89
Priority MEDIUM 44
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01087 · Published 2021-08-11 · No fix listed CWE-787
Priority MEDIUM 41
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01105 · Published 2021-08-11 · No fix listed
Priority MEDIUM 41
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04 · Published 2021-08-04 · No fix listed CWE-416
Priority MEDIUM 41
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04 · Published 2021-08-04 · No fix listed CWE-416
Priority MEDIUM 41
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04 · Published 2021-08-04 · No fix listed CWE-416
Priority MEDIUM 61
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.38251 · Published 2021-08-04 · No fix listed CWE-416
Load more
THREATIST.IORead the docs