Phantompdf (Foxit) - vulnerabilities (CVEs)

79 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2024-05-07. Vendor: Foxit.

CVEs of Phantompdf

• CVE-2021-34971 - CVSS 7.8 (high), 2024-05-07: Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2021-34975 - CVSS 7.8 (high), 2024-05-07: Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
• CVE-2021-34960 - CVSS 7.8 (high), 2024-05-07: Foxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
• CVE-2021-34964 - CVSS 7.8 (high), 2024-05-07: Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
• CVE-2021-34961 - CVSS 7.8 (high), 2024-05-07: Foxit PDF Editor Ink Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
• CVE-2021-34956 - CVSS 7.8 (high), 2024-05-07: Foxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
• CVE-2021-34955 - CVSS 7.8 (high), 2024-05-07: Foxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
• CVE-2021-34958 - CVSS 7.8 (high), 2024-05-07: Foxit PDF Editor Text Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
• CVE-2021-34957 - CVSS 7.8 (high), 2024-05-07: Foxit PDF Editor Highlight Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code…
• CVE-2021-34951 - CVSS 3.3 (low), 2024-05-07: Foxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose…
• CVE-2023-27365 - CVSS 7.8 (high), 2024-05-03: Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2023-27363 - CVSS 7.8 (high), 2024-05-03: Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
• CVE-2021-41785 - CVSS 7.8 (high), 2022-08-29: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code…
• CVE-2021-41784 - CVSS 7.8 (high), 2022-08-29: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code…
• CVE-2022-25641 - CVSS 5.5 (medium), 2022-08-29: Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object…
• CVE-2021-41781 - CVSS 7.8 (high), 2022-08-29: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code…
• CVE-2021-41780 - CVSS 7.8 (high), 2022-08-29: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code…
• CVE-2021-41783 - CVSS 7.8 (high), 2022-08-29: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code…
• CVE-2021-40326 - CVSS 5.5 (medium), 2022-08-29: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker…
• CVE-2021-41782 - CVSS 7.8 (high), 2022-08-29: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code…
• CVE-2021-27517 - CVSS 6.1 (medium), 2021-07-20: Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document…
• CVE-2021-31476 - CVSS 7.8 (high), 2021-06-16: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required…
• CVE-2021-27267 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
• CVE-2021-27270 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
• CVE-2021-27266 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
• CVE-2021-27269 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
• CVE-2021-27268 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
• CVE-2021-27271 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
• CVE-2021-27264 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
• CVE-2021-27263 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
• CVE-2021-27262 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
• CVE-2021-27265 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
• CVE-2021-27261 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
• CVE-2020-17411 - CVSS 3.3 (low), 2020-10-13: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is…
• CVE-2020-17415 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798. An attacker must first obtain the…
• CVE-2020-17413 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required…
• CVE-2020-17412 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required…
• CVE-2020-17410 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required…
• CVE-2020-15637 - CVSS 3.3 (low), 2020-08-20: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
• CVE-2020-15638 - CVSS 7.8 (high), 2020-08-20: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.2.29539. User interaction is required…
• CVE-2020-10908 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-10911 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-10902 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
• CVE-2020-10905 - CVSS 3.3 (low), 2020-04-22: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
• CVE-2020-10910 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-10913 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-10901 - CVSS 3.3 (low), 2020-04-22: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
• CVE-2020-10904 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
• CVE-2020-10909 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-10912 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-10903 - CVSS 3.3 (low), 2020-04-22: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
• CVE-2020-10891 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-10894 - CVSS 3.3 (low), 2020-04-22: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is…
• CVE-2020-10897 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
• CVE-2020-10890 - CVSS 8.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-10893 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
• CVE-2020-10896 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
• CVE-2020-10889 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-10892 - CVSS 8.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-10895 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
• CVE-2020-10898 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required…
• CVE-2020-8856 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608. User interaction is required to…
• CVE-2020-8855 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.2947. User interaction is required to…
• CVE-2020-8854 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2020-8846 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to…
• CVE-2020-8845 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to…
• CVE-2020-8853 - CVSS 7.8 (high), 2020-02-14: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
• CVE-2019-17135 - CVSS 7.8 (high), 2020-02-08: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required…
• CVE-2019-13334 - CVSS 7.8 (high), 2020-02-08: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required…
• CVE-2019-17136 - CVSS 7.8 (high), 2020-02-08: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required…
• CVE-2019-13333 - CVSS 7.8 (high), 2020-02-08: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required…
• CVE-2019-17145 - CVSS 8.8 (high), 2019-10-25: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required…
• CVE-2019-17144 - CVSS 8.8 (high), 2019-10-25: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required…
• CVE-2019-17139 - CVSS 8.8 (high), 2019-10-25: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required…
• CVE-2019-17142 - CVSS 8.8 (high), 2019-10-25: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required…
• CVE-2019-17141 - CVSS 8.8 (high), 2019-10-25: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required…
• CVE-2019-17140 - CVSS 8.8 (high), 2019-10-25: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required…
• CVE-2019-17143 - CVSS 4.3 (medium), 2019-10-25: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is…
• CVE-2019-6776 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required…
• CVE-2019-13317 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to…
• CVE-2019-13316 - CVSS 7.8 (high), 2019-10-04: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to…
• CVE-2019-6765 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required…
• CVE-2019-6762 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required…
• CVE-2019-6752 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF 9.3.10826. User interaction is…
• CVE-2019-6756 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF 9.4.0.16811. User interaction is…
• CVE-2019-6734 - CVSS 6.5 (medium), 2019-03-21: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to…
• CVE-2019-6733 - CVSS 6.5 (medium), 2019-03-21: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to…
• CVE-2019-6732 - CVSS 6.5 (medium), 2019-03-21: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to…
• CVE-2019-6731 - CVSS 8.8 (high), 2019-03-21: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit…
• CVE-2018-17693 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…
• CVE-2018-17698 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…
• CVE-2018-17695 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…
• CVE-2018-17694 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…
• CVE-2018-17701 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…
• CVE-2018-17689 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…
• CVE-2018-17692 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…
• CVE-2018-17688 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…
• CVE-2018-17691 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…
• CVE-2018-17687 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…
• CVE-2018-17690 - CVSS 8.8 (high), 2019-01-24: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required…