Foxit - vulnerabilities (CVEs)

914 CVEs in 17 products, 0 in the last 30 days, newest from 2026-09-23.

Products

Pdf Reader - 369 CVEs
Pdf Editor - 328 CVEs
Foxit Reader - 246 CVEs
Reader - 154 CVEs
Phantompdf - 79 CVEs
Studio Photo - 51 CVEs
Pdf Editor Cloud - 9 CVEs
Foxit Pdf Reader - 8 CVEs
Foxit - 3 CVEs
Esign - 2 CVEs
Foxit Phantompdf - 2 CVEs
Pdf Editor For Mac - 2 CVEs
Ai - 1 CVEs
Foxit Activex Pro Sdk - 1 CVEs
Pdf Reader For Mac - 1 CVEs
Pdf Services Api - 1 CVEs
Reader3.0 - 1 CVEs

Newest CVEs of Foxit

CVE-2026-91790 - CVSS 7.8 (high), 2026-09-23: When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a…
CVE-2026-91791 - CVSS 7.8 (high), 2026-09-23: When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by…
CVE-2026-91792 - CVSS 7.8 (high), 2026-09-23: When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related…
CVE-2026-91793 - CVSS 7.8 (high), 2026-09-23: When opening a specially crafted PDF, Foxit PDF Editor/Reader executes scripts that modify annotation rich-text attributes containing malformed font data.…
CVE-2026-91795 - CVSS 7.8 (high), 2026-09-23: Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal…
CVE-2026-91796 - CVSS 6.1 (medium), 2026-09-23: The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external…
CVE-2026-91797 - CVSS 7.8 (high), 2026-09-23: Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be…
CVE-2026-91799 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of JavaScript array objects. A specially crafted PDF may cause the application to…
CVE-2026-91805 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree handling. A specially crafted PDF can trigger page-structure changes during…
CVE-2026-91800 - CVSS 8.8 (high), 2026-09-23: A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable…
CVE-2026-91801 - CVSS 7.8 (high), 2026-09-23: A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may…
CVE-2026-91802 - CVSS 7.8 (high), 2026-09-23: A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target…
CVE-2026-91804 - CVSS 7.8 (high), 2026-09-23: A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in…
CVE-2026-91806 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF form fields. Embedded JavaScript may access form-field references after the…
CVE-2026-91807 - CVSS 6.1 (medium), 2026-09-23: A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data. Insufficient validation of the…
CVE-2026-91803 - CVSS 8.8 (high), 2026-09-23: A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a…
CVE-2026-91808 - CVSS 6.1 (medium), 2026-09-23: A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata.…
CVE-2026-91810 - CVSS 6.1 (medium), 2026-09-23: A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image metadata may cause…
CVE-2026-91811 - CVSS 7.8 (high), 2026-09-23: A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular…
CVE-2026-91812 - CVSS 8.1 (high), 2026-09-23: A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity…
CVE-2026-91813 - CVSS 8.8 (high), 2026-09-23: A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to…
CVE-2026-91815 - CVSS 7.8 (high), 2026-09-23: Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the…
CVE-2026-91816 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by embedded JavaScript…
CVE-2026-91817 - CVSS 6.1 (medium), 2026-09-23: A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation…
CVE-2026-91818 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation…
CVE-2026-91789 - CVSS 7.8 (high), 2026-09-23: Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain…
CVE-2026-91809 - CVSS 7.8 (high), 2026-09-23: A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may…
CVE-2026-18622 - CVSS 5.5 (medium), 2026-08-13: Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field…
CVE-2026-13126 - CVSS 7.8 (high), 2026-07-08: The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up…
CVE-2026-13127 - CVSS 7.8 (high), 2026-07-08: The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects.…