Foxitsoftware - vulnerabilities (CVEs)

803 CVEs in 25 products, 0 in the last 30 days, newest from 2025-08-05.

Products

Phantompdf - 549 CVEs
Foxit Reader - 377 CVEs
Reader - 259 CVEs
Foxit Studio Photo - 54 CVEs
Pdf Editor - 28 CVEs
3d - 20 CVEs
Foxit Pdf Sdk Activex - 10 CVEs
U3d - 9 CVEs
Enterprise Reader - 3 CVEs
Pdf Reader - 3 CVEs
Quick Pdf Library - 3 CVEs
Wac Server - 3 CVEs
Foxit Pdf Toolkit - 2 CVEs
Mobilepdf - 2 CVEs
E-mail Advertising System - 1 CVEs
Foxit Advanced Pdf Editor - 1 CVEs
Foxit Mobilepdf - Pdf Reader - 1 CVEs
Foxit Pdf - 1 CVEs
Foxit Pdf Editor - 1 CVEs
Foxit Pdf Sdk Dll - 1 CVEs
Foxit Phantom - 1 CVEs
Jpeg2000/jbig2 Decoder Add-on - 1 CVEs
Jpeg2000 Jbig2 Decoder Add-on - 1 CVEs
Pdf Activex - 1 CVEs
Pdf Compressor - 1 CVEs

Newest CVEs of Foxitsoftware

CVE-2013-10068 - CVSS 9.4 (critical), 2025-08-05: Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the…
CVE-2024-28888 - CVSS 8.8 (high), 2024-10-02: A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a…
CVE-2024-41605 - CVSS 8.4 (high), 2024-09-26: In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side…
CVE-2024-29072 - CVSS 8.2 (high), 2024-05-28: A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the…
CVE-2024-25648 - CVSS 8.8 (high), 2024-04-30: A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious…
CVE-2024-25575 - CVSS 8.8 (high), 2024-04-30: A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a…
CVE-2023-41257 - CVSS 8.8 (high), 2023-11-27: A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript code inside a…
CVE-2023-40194 - CVSS 8.8 (high), 2023-11-27: An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace…
CVE-2023-39542 - CVSS 8.8 (high), 2023-11-27: A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary…
CVE-2023-38573 - CVSS 8.8 (high), 2023-11-27: A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code inside a malicious…
CVE-2023-35985 - CVSS 8.8 (high), 2023-11-27: An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a…
CVE-2023-32616 - CVSS 8.8 (high), 2023-11-27: A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF…
CVE-2022-43310 - CVSS 7.8 (high), 2022-11-09: An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL…
CVE-2021-38574 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string.
CVE-2021-38565 - CVSS 7.5 (high), 2021-08-11: An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm.
CVE-2021-38570 - CVSS 9.1 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink.
CVE-2021-38564 - CVSS 9.1 (critical), 2021-08-11: An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand.
CVE-2021-38573 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.
CVE-2021-38567 - CVSS 7.5 (high), 2021-08-11: An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary entries, leading to a NULL…
CVE-2021-38569 - CVSS 7.5 (high), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA…
CVE-2021-38563 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size (derived from a /Size…
CVE-2021-38572 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated.
CVE-2021-38566 - CVSS 7.5 (high), 2021-08-11: An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded…
CVE-2021-38568 - CVSS 9.8 (critical), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document…
CVE-2021-38571 - CVSS 7.8 (high), 2021-08-11: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502.
CVE-2021-33794 - CVSS 9.1 (critical), 2021-08-11: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form…
CVE-2021-33793 - CVSS 9.8 (critical), 2021-08-11: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document…
CVE-2021-34849 - CVSS 7.8 (high), 2021-08-04: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required…
CVE-2021-34852 - CVSS 7.8 (high), 2021-08-04: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required…
CVE-2021-34851 - CVSS 7.8 (high), 2021-08-04: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required…