Foxit Reader (Foxitsoftware) - vulnerabilities (CVEs)

377 CVEs, 0 in the last 30 days, 148 known versions, newest CVE from 2025-08-05. Vendor: Foxitsoftware.

CVEs of Foxit Reader

CVE-2013-10068 - CVSS 9.4 (critical), 2025-08-05: Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the…
CVE-2024-28888 - CVSS 8.8 (high), 2024-10-02: A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a…
CVE-2024-29072 - CVSS 8.2 (high), 2024-05-28: A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the…
CVE-2024-25648 - CVSS 8.8 (high), 2024-04-30: A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious…
CVE-2024-25575 - CVSS 8.8 (high), 2024-04-30: A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a…
CVE-2023-41257 - CVSS 8.8 (high), 2023-11-27: A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript code inside a…
CVE-2023-38573 - CVSS 8.8 (high), 2023-11-27: A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code inside a malicious…
CVE-2023-40194 - CVSS 8.8 (high), 2023-11-27: An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace…
CVE-2023-39542 - CVSS 8.8 (high), 2023-11-27: A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary…
CVE-2023-35985 - CVSS 8.8 (high), 2023-11-27: An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a…
CVE-2023-32616 - CVSS 8.8 (high), 2023-11-27: A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF…
CVE-2022-43310 - CVSS 7.8 (high), 2022-11-09: An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL…
CVE-2021-38574 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string.
CVE-2021-38568 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document…
CVE-2021-38571 - CVSS 7.8 (high), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502.
CVE-2021-38570 - CVSS 9.1 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink.
CVE-2021-38573 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.
CVE-2021-38569 - CVSS 7.5 (high), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA…
CVE-2021-38572 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated.
CVE-2021-33794 - CVSS 9.1 (critical), 2021-08-11: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form…
CVE-2021-33793 - CVSS 9.8 (critical), 2021-08-11: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document…
CVE-2021-33795 - CVSS 5.5 (medium), 2021-07-09: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature…
CVE-2021-33792 - CVSS 7.8 (high), 2021-07-09: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary.
CVE-2021-31476 - CVSS 7.8 (high), 2021-06-16: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required…
CVE-2021-21822 - CVSS 8.8 (high), 2021-05-10: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can…
CVE-2021-31443 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31446 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31449 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31452 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31455 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31442 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31445 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31448 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31451 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31454 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31441 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31444 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31447 - CVSS 3.3 (low), 2021-05-07: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is…
CVE-2021-31450 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-31453 - CVSS 7.8 (high), 2021-05-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to…
CVE-2021-27271 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27267 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27270 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27266 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
CVE-2021-27269 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27268 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27261 - CVSS 7.8 (high), 2021-03-30: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required…
CVE-2021-27264 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
CVE-2021-27263 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
CVE-2021-27262 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
CVE-2021-27265 - CVSS 3.3 (low), 2021-03-30: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is…
CVE-2020-27860 - CVSS 7.8 (high), 2021-02-12: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to…
CVE-2020-13548 - CVSS 8.8 (high), 2021-02-10: In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An…
CVE-2018-18689 - CVSS 5.3 (medium), 2021-01-07: The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.…
CVE-2018-18688 - CVSS 5.3 (medium), 2021-01-07: The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.…
CVE-2020-35931 - CVSS 7.8 (high), 2020-12-31: An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on…
CVE-2020-13547 - CVSS 8.8 (high), 2020-12-22: A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document…
CVE-2020-13570 - CVSS 8.8 (high), 2020-12-22: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can…
CVE-2020-13560 - CVSS 8.8 (high), 2020-12-22: A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document…
CVE-2020-13557 - CVSS 8.8 (high), 2020-12-22: A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document…
CVE-2020-28203 - CVSS 5.5 (medium), 2020-12-15: An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file,…
CVE-2020-14425 - CVSS 7.8 (high), 2020-11-02: Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the…
CVE-2020-17416 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. User interaction is required to…
CVE-2020-17415 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798. An attacker must first obtain the…
CVE-2020-17414 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must first obtain the…
CVE-2020-17417 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to…
CVE-2020-17410 - CVSS 7.8 (high), 2020-10-13: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required…
CVE-2020-26535 - CVSS 9.8 (critical), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index…
CVE-2020-26538 - CVSS 7.8 (high), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the…
CVE-2020-26534 - CVSS 9.8 (critical), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and…
CVE-2020-26537 - CVSS 9.8 (critical), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color…
CVE-2020-26540 - CVSS 7.5 (high), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mechanism is not applied to code signing,…
CVE-2020-26536 - CVSS 5.5 (medium), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PDF document.
CVE-2020-26539 - CVSS 9.8 (critical), 2020-10-02: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V (in the Additional Action and Field…
CVE-2020-10913 - CVSS 7.8 (high), 2020-04-22: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required…
CVE-2019-17139 - CVSS 8.8 (high), 2019-10-25: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required…
CVE-2019-13124 - CVSS 7.5 (high), 2019-09-30: Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled…
CVE-2019-13123 - CVSS 7.5 (high), 2019-09-30: Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled…
CVE-2019-6763 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to…
CVE-2019-6766 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is…
CVE-2019-6769 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to…
CVE-2019-6772 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is…
CVE-2019-6759 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to…
CVE-2019-6762 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required…
CVE-2019-6765 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.4.1.16828. User interaction is required…
CVE-2019-6768 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to…
CVE-2019-6771 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is…
CVE-2019-6758 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.16811. User interaction is…
CVE-2019-6761 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.0.16811. User interaction is required to…
CVE-2019-6764 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to…
CVE-2019-6767 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to…
CVE-2019-6770 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is…
CVE-2019-6773 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is…
CVE-2019-6760 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.16811. User interaction is required to…
CVE-2019-6753 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.3.0.10826. User interaction is…
CVE-2019-6756 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF 9.4.0.16811. User interaction is…
CVE-2019-6755 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to…
CVE-2019-6752 - CVSS 5.5 (medium), 2019-06-03: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF 9.3.10826. User interaction is…
CVE-2019-6754 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to…
CVE-2019-6757 - CVSS 7.8 (high), 2019-06-03: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.16811. User interaction is required to…