Total 357 security vulnerabilities recorded for foxit software and firmware.
When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid ...
Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the do...
The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page obje...
The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid...
When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which all...
Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document mod...
Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to acces...
Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to inva...
Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes....
A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbit...
Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and d...
Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" excepti...
An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This...
Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process. Under certain conditions, th...
The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-...
The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows cra...
The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF. When pages and annotations are crafted...
The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and pa...
The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources. When a PDF contains a sta...
The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by l...
The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content ...
Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is emb...
Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded i...
URL parameters are directly embedded into JavaScript code or HTML attributes without proper encoding or sanitization. This allows attackers to inject ...