CVE-2021-33794

3 documents3 sources
Severity
9.1CRITICAL
EPSS
0.0%
top 92.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Foxitsoftware Foxit ReaderFoxitsoftware Phantompdf
Timeline
PublishedAug 11
Latest updateMay 24

Description

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages2 packages

Patches

Patch: www.foxitsoftware.com ↗Patch: www.foxitsoftware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c7q8-wf85-wcvw: Foxit Reader before 10↗2022-05-24
▶
CVEList
CVE-2021-33794: Foxit Reader before 10↗2021-08-11
▶