Foxit Reader (Foxit) - vulnerabilities (CVEs)

246 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2025-08-13. Vendor: Foxit.

CVEs of Foxit Reader

CVE-2025-32451 - CVSS 8.8 (high), 2025-08-13: A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside…
CVE-2024-49576 - CVSS 8.8 (high), 2024-12-18: A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript code inside…
CVE-2024-47810 - CVSS 8.8 (high), 2024-12-18: A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious…
CVE-2024-28888 - CVSS 8.8 (high), 2024-10-02: A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a…
CVE-2024-29072 - CVSS 8.2 (high), 2024-05-28: A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the…
CVE-2024-25575 - CVSS 8.8 (high), 2024-04-30: A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a…
CVE-2024-25938 - CVSS 8.8 (high), 2024-04-30: A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious…
CVE-2024-25648 - CVSS 8.8 (high), 2024-04-30: A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious…
CVE-2023-41257 - CVSS 8.8 (high), 2023-11-27: A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript code inside a…
CVE-2023-39542 - CVSS 8.8 (high), 2023-11-27: A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary…
CVE-2023-38573 - CVSS 8.8 (high), 2023-11-27: A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code inside a malicious…
CVE-2023-40194 - CVSS 8.8 (high), 2023-11-27: An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace…
CVE-2023-35985 - CVSS 8.8 (high), 2023-11-27: An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a…
CVE-2023-32616 - CVSS 8.8 (high), 2023-11-27: A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF…
CVE-2023-28744 - CVSS 8.8 (high), 2023-07-19: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can…
CVE-2023-33876 - CVSS 8.8 (high), 2023-07-19: A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javascript code inside a…
CVE-2023-27379 - CVSS 8.8 (high), 2023-07-19: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects…
CVE-2023-33866 - CVSS 8.8 (high), 2023-07-19: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects…
CVE-2023-32664 - CVSS 8.8 (high), 2023-07-19: A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. Specially crafted Javascript code…
CVE-2022-40129 - CVSS 8.8 (high), 2022-11-21: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can…
CVE-2022-38097 - CVSS 8.8 (high), 2022-11-21: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroying annotation…
CVE-2022-37332 - CVSS 8.8 (high), 2022-11-21: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can…
CVE-2022-32774 - CVSS 8.8 (high), 2022-11-21: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely deleting objects…
CVE-2018-17621 - CVSS 8.8 (high), 2018-10-29: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-17624 - CVSS 8.8 (high), 2018-10-29: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to…
CVE-2018-17623 - CVSS 8.8 (high), 2018-10-29: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-17622 - CVSS 6.5 (medium), 2018-10-29: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is…
CVE-2018-17617 - CVSS 8.8 (high), 2018-10-29: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-17620 - CVSS 8.8 (high), 2018-10-29: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-17616 - CVSS 8.8 (high), 2018-10-29: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-17619 - CVSS 8.8 (high), 2018-10-29: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-17615 - CVSS 8.8 (high), 2018-10-29: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-17618 - CVSS 8.8 (high), 2018-10-29: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14317 - CVSS 8.8 (high), 2018-08-30: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to…
CVE-2018-14310 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to…
CVE-2018-14314 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14313 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14316 - CVSS 6.5 (medium), 2018-07-31: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is…
CVE-2018-14312 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14315 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14307 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14289 - CVSS 6.5 (medium), 2018-07-31: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is…
CVE-2018-14292 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14296 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14299 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14303 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14306 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14288 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14309 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to…
CVE-2018-14291 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14294 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14298 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14302 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14305 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14308 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14290 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14293 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to…
CVE-2018-14297 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14301 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14304 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to…
CVE-2018-14273 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14276 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14279 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14282 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14285 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14269 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14272 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14275 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14278 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14281 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14284 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14268 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14287 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14271 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14274 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14277 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14280 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14283 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14267 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14286 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14270 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14257 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14260 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14263 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14247 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14266 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14250 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14253 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14256 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14259 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14262 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14265 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14249 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14252 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14255 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14258 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14261 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14264 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14248 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…
CVE-2018-14251 - CVSS 8.8 (high), 2018-07-31: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to…