foxitsoftware Vulnerability Advisory Catalog

Total 770 security vulnerabilities recorded for foxitsoftware software and firmware.

← Back to All Vendors
Component: foxit_reader

A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript code inside...

๐Ÿ“… 2023-11-27
CVSS 8.8 Dossier →
Component: foxit_reader

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace ...

๐Ÿ“… 2023-11-27
CVSS 8.8 Dossier →
Component: foxit_reader

A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitra...

๐Ÿ“… 2023-11-27
CVSS 8.8 Dossier →
Component: foxit_reader

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code inside a mal...

๐Ÿ“… 2023-11-27
CVSS 8.8 Dossier →
Component: foxit_reader

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly valid...

๐Ÿ“… 2023-11-27
CVSS 8.8 Dossier →
Component: foxit_reader

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malici...

๐Ÿ“… 2023-11-27
CVSS 8.8 Dossier →
Component: foxit_reader

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for...

๐Ÿ“… 2022-11-09
CVSS 7.8 Dossier →
CVE-2021-38574 CRITICAL
Component: foxit_reader

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string....

๐Ÿ“… 2021-08-11
CVSS 9.8 Dossier →
CVE-2021-38573 CRITICAL
Component: foxit_reader

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not vali...

๐Ÿ“… 2021-08-11
CVSS 9.8 Dossier →
CVE-2021-38572 CRITICAL
Component: foxit_reader

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not va...

๐Ÿ“… 2021-08-11
CVSS 9.8 Dossier →
Component: foxit_reader

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502....

๐Ÿ“… 2021-08-11
CVSS 7.8 Dossier →
CVE-2021-38570 CRITICAL
Component: foxit_reader

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a syml...

๐Ÿ“… 2021-08-11
CVSS 9.1 Dossier →
Component: foxit_reader

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of ...

๐Ÿ“… 2021-08-11
CVSS 7.5 Dossier →
CVE-2021-38568 CRITICAL
Component: foxit_reader

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different d...

๐Ÿ“… 2021-08-11
CVSS 9.8 Dossier →
Component: pdf_editor

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of emb...

๐Ÿ“… 2021-08-11
CVSS 7.5 Dossier →
Component: pdf_editor

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm....

๐Ÿ“… 2021-08-11
CVSS 7.5 Dossier →
CVE-2021-38564 CRITICAL
Component: pdf_editor

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand....

๐Ÿ“… 2021-08-11
CVSS 9.1 Dossier →
CVE-2021-33794 CRITICAL
Component: foxit_reader

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA ...

๐Ÿ“… 2021-08-11
CVSS 9.1 Dossier →
CVE-2021-33793 CRITICAL
Component: foxit_reader

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office docu...

๐Ÿ“… 2021-08-11
CVSS 9.8 Dossier →
Component: foxit_reader

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and si...

๐Ÿ“… 2021-07-09
CVSS 5.5 Dossier →
Component: foxit_reader

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary....

๐Ÿ“… 2021-07-09
CVSS 7.8 Dossier →
Component: foxit_reader

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is r...

๐Ÿ“… 2021-06-16
CVSS 7.8 Dossier →
Component: phantompdf

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is requi...

๐Ÿ“… 2021-05-21
CVSS 7.8 Dossier →
Component: foxit_reader

A use-after-free vulnerability exists in the JavaScript engine of Foxit Softwareโ€™s PDF Reader, version 10.1.3.37598. A specially crafted PDF document ...

๐Ÿ“… 2021-05-10
CVSS 8.8 Dossier →
Page 1 of 33 (770 Total Records)