FR
Product
Foxit Reader
376
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 268Medium 69Low 11
Watch
Add Foxit Reader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-38574 | 9.8 | Aug 11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4 Affected: before 10.1.4 |
| CVE-2021-38573 | 9.8 | Aug 11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4 Affected: before 10.1.4 |
| CVE-2021-38572 | 9.8 | Aug 11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4 Affected: before 10.1.4 |
| CVE-2021-38568 | 9.8 | Aug 11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4 Affected: before 10.1.4 |
| CVE-2021-33793 | 9.8 | Aug 11 | Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion Affected: before 10.1.4 |
| CVE-2020-26539 | 9.8 | Oct 2 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1 Affected: before 10.1 |
| CVE-2020-26537 | 9.8 | Oct 2 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1 Affected: before 10.1 |
| CVE-2020-26535 | 9.8 | Oct 2 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1 Affected: before 10.1 |
| CVE-2020-26534 | 9.8 | Oct 2 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1 Affected: before 10.1 |
| CVE-2018-14442 | 9.8 | Jul 20 | Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs Affected: before 9.2 |
| CVE-2021-38570 | 9.1 | Aug 11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4 Affected: before 10.1.4 |
| CVE-2021-33794 | 9.1 | Aug 11 | Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction Affected: before 10.1.4 |
| CVE-2018-18933 | 9.1 | Nov 5 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or… Affected: 9.3.0.10826 |
| CVE-2024-28888 | 8.8 | Oct 2 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object Affected: 2024.1.0.23997 |
| CVE-2024-25648 | 8.8 | Apr 30 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget Affected: 2024.1.0.23997 |
| CVE-2024-25575 | 8.8 | Apr 30 | A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object Affected: 2024.1.0.23997 |
| CVE-2023-39542 | 8.8 | Nov 27 | A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356 Affected: 12.1.3.15356 |
| CVE-2023-40194 | 8.8 | Nov 27 | An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters Affected: 12.1.3.15356 |
| CVE-2023-35985 | 8.8 | Nov 27 | An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension Affected: 12.1.3.15356 |
| CVE-2023-32616 | 8.8 | Nov 27 | A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations Affected: 12.1.2.15356 |
| CVE-2023-41257 | 8.8 | Nov 27 | A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties Affected: 12.1.3.15356 |
| CVE-2023-38573 | 8.8 | Nov 27 | A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field Affected: 12.1.2.15356 |
| CVE-2021-21822 | 8.8 | May 10 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598 Affected: 10.1.3.37598 |
| CVE-2020-13548 | 8.8 | Feb 10 | In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution Affected: 10.1.0.37527 |
| CVE-2020-13547 | 8.8 | Dec 22 | A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527 Affected: 10.0.0.37527 |
| CVE-2020-13570 | 8.8 | Dec 22 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527 Affected: 10.1.0.37527 |
| CVE-2020-13560 | 8.8 | Dec 22 | A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527 Affected: 10.1.0.37527 |
| CVE-2020-13557 | 8.8 | Dec 22 | A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527 Affected: 10.1.0.37527 |
| CVE-2019-17139 | 8.8 | Oct 25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723 Affected: through 9.6.0.25114 |
| CVE-2018-14317 | 8.8 | Aug 30 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096 Affected: through 9.1.0.5096 |
| CVE-2018-3939 | 8.8 | Aug 1 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096 Affected: through 9.1.0.5096 |
| CVE-2018-14256 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14255 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14254 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14253 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14252 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14251 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14250 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14249 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14248 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14247 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14246 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14245 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14244 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14243 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14242 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14241 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-11623 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-11622 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14290 | 8.8 | Jul 31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096 Affected: through 9.1.0.5096 |