Foxit Pdf Reader (Foxit Software Inc.) - vulnerabilities (CVEs)

80 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-23. Vendor: Foxit Software Inc..

CVEs of Foxit Pdf Reader

CVE-2026-91788 - CVSS 4.7 (medium), 2026-09-23: When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a…
CVE-2026-91790 - CVSS 7.8 (high), 2026-09-23: When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a…
CVE-2026-91791 - CVSS 7.8 (high), 2026-09-23: When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by…
CVE-2026-91792 - CVSS 7.8 (high), 2026-09-23: When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related…
CVE-2026-91793 - CVSS 7.8 (high), 2026-09-23: When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data.…
CVE-2026-91794 - CVSS 7.8 (high), 2026-09-23: An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation…
CVE-2026-91795 - CVSS 7.8 (high), 2026-09-23: Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal…
CVE-2026-91796 - CVSS 6.1 (medium), 2026-09-23: The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external…
CVE-2026-91797 - CVSS 7.8 (high), 2026-09-23: Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be…
CVE-2026-91799 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to…
CVE-2026-91805 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during…
CVE-2026-91801 - CVSS 7.8 (high), 2026-09-23: A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may…
CVE-2026-91802 - CVSS 7.8 (high), 2026-09-23: A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target…
CVE-2026-91804 - CVSS 7.8 (high), 2026-09-23: A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in…
CVE-2026-91806 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the…
CVE-2026-91807 - CVSS 6.1 (medium), 2026-09-23: A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the…
CVE-2026-91798 - CVSS 8.8 (high), 2026-09-23: A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the…
CVE-2026-91803 - CVSS 8.8 (high), 2026-09-23: A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a…
CVE-2026-91808 - CVSS 6.1 (medium), 2026-09-23: A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata.…
CVE-2026-91810 - CVSS 6.1 (medium), 2026-09-23: A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause…
CVE-2026-91811 - CVSS 7.8 (high), 2026-09-23: A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular…
CVE-2026-91812 - CVSS 8.1 (high), 2026-09-23: A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity…
CVE-2026-91813 - CVSS 8.8 (high), 2026-09-23: A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to…
CVE-2026-91815 - CVSS 7.8 (high), 2026-09-23: Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the…
CVE-2026-91814 - CVSS 5.3 (medium), 2026-09-23: A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content…
CVE-2026-91816 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript…
CVE-2026-91817 - CVSS 6.1 (medium), 2026-09-23: A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation…
CVE-2026-91818 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation…
CVE-2026-91789 - CVSS 7.8 (high), 2026-09-23: Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain…
CVE-2026-91809 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may…
CVE-2026-18622 - CVSS 5.5 (medium), 2026-08-13: Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field…
CVE-2026-13126 - CVSS 7.8 (high), 2026-07-08: The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up…
CVE-2026-13127 - CVSS 7.8 (high), 2026-07-08: The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects.…
CVE-2026-13128 - CVSS 7.8 (high), 2026-07-08: Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document…
CVE-2026-57239 - CVSS 8.2 (high), 2026-07-08: The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate…
CVE-2026-57240 - CVSS 7.8 (high), 2026-07-08: When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid…
CVE-2026-13129 - CVSS 7.8 (high), 2026-07-08: When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form…
CVE-2026-57238 - CVSS 7.8 (high), 2026-07-08: After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the invalid object, which caused the…
CVE-2026-57241 - CVSS 6.1 (medium), 2026-07-08: The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related objects within the application to…
CVE-2026-57242 - CVSS 7.8 (high), 2026-07-08: The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value…
CVE-2026-57243 - CVSS 6.1 (medium), 2026-07-08: During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page…
CVE-2026-57245 - CVSS 7.8 (high), 2026-07-08: When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation…
CVE-2026-57246 - CVSS 7.8 (high), 2026-07-08: When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin…
CVE-2026-57248 - CVSS 7.8 (high), 2026-07-08: When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument checks. As a result,…
CVE-2026-57249 - CVSS 7.8 (high), 2026-07-08: After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the…
CVE-2026-57251 - CVSS 7.8 (high), 2026-07-08: The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks.…
CVE-2026-57253 - CVSS 6.1 (medium), 2026-07-08: An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer pointer is used,…
CVE-2026-57252 - CVSS 7.8 (high), 2026-07-08: When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel…
CVE-2026-57254 - CVSS 7.8 (high), 2026-07-08: There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type…
CVE-2026-57255 - CVSS 6.1 (medium), 2026-07-08: The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output…
CVE-2026-57259 - CVSS 6.5 (medium), 2026-07-08: The input file does not need to be strictly in a structurally valid PDF format. Instead, after reviewing the content, the original document disguised as a PDF…
CVE-2026-57237 - CVSS 7.8 (high), 2026-07-08: When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the…
CVE-2026-57244 - CVSS 7.8 (high), 2026-07-08: After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the…
CVE-2026-57247 - CVSS 7.8 (high), 2026-07-08: The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before…
CVE-2026-57250 - CVSS 7.8 (high), 2026-07-08: When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the…
CVE-2026-57256 - CVSS 7.8 (high), 2026-07-08: When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form…
CVE-2026-57257 - CVSS 6.1 (medium), 2026-07-08: During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As…
CVE-2026-57258 - CVSS 6.1 (medium), 2026-07-08: The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads…
CVE-2026-57260 - CVSS 7.8 (high), 2026-07-08: The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal…
CVE-2026-5938 - CVSS 5.5 (medium), 2026-04-27: Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of…
CVE-2026-5941 - CVSS 7.8 (high), 2026-04-27: Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid…
CVE-2026-5937 - CVSS 5.5 (medium), 2026-04-27: Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception,…
CVE-2026-5940 - CVSS 7.8 (high), 2026-04-27: Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.
CVE-2026-5943 - CVSS 7.8 (high), 2026-04-27: Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document…
CVE-2026-5939 - CVSS 5.5 (medium), 2026-04-27: A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary…
CVE-2026-5942 - CVSS 5.5 (medium), 2026-04-27: Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access…
CVE-2026-3779 - CVSS 7.8 (high), 2026-04-01: The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted…
CVE-2026-3780 - CVSS 7.8 (high), 2026-04-01: The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable…
CVE-2026-3776 - CVSS 5.5 (medium), 2026-04-01: The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources. When a PDF contains a stamp…
CVE-2026-3775 - CVSS 7.8 (high), 2026-04-01: The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by…
CVE-2026-3778 - CVSS 6.2 (medium), 2026-04-01: The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF. When pages and annotations are crafted that…
CVE-2026-3777 - CVSS 7.8 (high), 2026-04-01: The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page…
CVE-2025-66499 - CVSS 7.8 (high), 2025-12-19: A heap-based buffer overflow vulnerability exists in the PDF parsing of Foxit PDF Reader when processing specially crafted JBIG2 data. An integer overflow in…
CVE-2025-66498 - CVSS 7.8 (high), 2025-12-19: A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing U3D data. When…
CVE-2025-66494 - CVSS 7.8 (high), 2025-12-19: A use-after-free vulnerability exists in the PDF file parsing of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows. A PDF object managed by…
CVE-2025-66497 - CVSS 7.8 (high), 2025-12-19: A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When…
CVE-2025-66496 - CVSS 7.8 (high), 2025-12-19: A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When…
CVE-2025-66495 - CVSS 7.8 (high), 2025-12-19: A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a…
CVE-2025-66493 - CVSS 7.8 (high), 2025-12-19: A use-after-free vulnerability exists in the AcroForm handling of Foxit PDF Reader and Foxit PDF Editor before 2025.2.1,14.0.1 and 13.2.1 on Windows . When…
CVE-2025-13941 - CVSS 8.8 (high), 2025-12-19: A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system permissions…