Foxit Pdf Editor vulnerabilities

266 known vulnerabilities affecting foxit/pdf_editor.

Total CVEs

266

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL3HIGH197MEDIUM36LOW30

Vulnerabilities

Page 11 of 14

CVE-2022-37378HIGHCVSS 7.8fixed in 10.1.9≥ 11.0.0, < 11.2.3+2 more2023-03-29

CVE-2022-37378 [HIGH] CWE-416 CVE-2022-37378: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the optimization of JavaScript functions. The issue results

nvd

CVE-2022-37387HIGHCVSS 7.8fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29

CVE-2022-37387 [HIGH] CWE-416 CVE-2022-37387: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack o

nvd

CVE-2022-37388HIGHCVSS 7.8fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29

CVE-2022-37388 [HIGH] CWE-125 CVE-2022-37388: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can tri

nvd

CVE-2022-43640MEDIUMCVSS 5.5fixed in 10.1.10≥ 11.0.0, < 11.2.4+1 more2023-03-29

CVE-2022-43640 [MEDIUM] CWE-125 CVE-2022-43640: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF fi

nvd

CVE-2022-37386MEDIUMCVSS 5.5fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29

CVE-2022-37386 [MEDIUM] CWE-125 CVE-2022-37386: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the resetForm method. By performing actions in Jav

nvd

CVE-2022-37382MEDIUMCVSS 5.5fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29

CVE-2022-37382 [MEDIUM] CWE-416 CVE-2022-37382: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeIcon method. The issue results from the

nvd

CVE-2022-37379MEDIUMCVSS 5.5fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29

CVE-2022-37379 [MEDIUM] CWE-416 CVE-2022-37379: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the AFSpecial_KeystrokeEx method.

nvd

CVE-2022-37380MEDIUMCVSS 5.5fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29

CVE-2022-37380 [MEDIUM] CWE-125 CVE-2022-37380: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of ADBC objects. By performing action

nvd

CVE-2022-37383MEDIUMCVSS 5.5fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29

CVE-2022-37383 [MEDIUM] CWE-125 CVE-2022-37383: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. By performing actions

nvd

CVE-2022-37376LOWCVSS 3.3fixed in 10.1.9≥ 11.0.0, < 11.2.3+2 more2023-03-29

CVE-2022-37376 [LOW] CWE-125 CVE-2022-37376: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Editor 11.1.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of arrays. By performing actions in Java

nvd

CVE-2022-24908HIGHCVSS 7.8fixed in 10.1.7≥ 11.0.0, < 11.2.12023-03-28

CVE-2022-24908 [HIGH] CWE-125 CVE-2022-24908: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. Crafted data in a JP2 image can t

nvd

CVE-2022-24907HIGHCVSS 7.8fixed in 10.1.7≥ 11.0.0, < 11.2.12023-03-28

CVE-2022-24907 [HIGH] CWE-125 CVE-2022-24907: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. Crafted data in a JP2 image can t

nvd

CVE-2022-47881MEDIUMCVSS 6.5≤ 10.1.8.37795≥ 11.0.0, ≤ 11.2.2.535752023-01-18

CVE-2022-47881 [MEDIUM] CWE-125 CVE-2022-47881: Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability. Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.

nvd

CVE-2021-41782HIGHCVSS 7.8≥ 11.0, < 11.12022-08-29

CVE-2021-41782 [HIGH] CWE-416 CVE-2021-41782: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attacke Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.

nvd

CVE-2021-41781HIGHCVSS 7.8≥ 11.0, < 11.12022-08-29

CVE-2021-41781 [HIGH] CWE-416 CVE-2021-41781: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attacke Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.

nvd

CVE-2021-41780HIGHCVSS 7.8≥ 11.0, < 11.12022-08-29

CVE-2021-41780 [HIGH] CWE-416 CVE-2021-41780: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attacke Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.

nvd

CVE-2021-41785HIGHCVSS 7.8≥ 11.0, < 11.12022-08-29

CVE-2021-41785 [HIGH] CWE-416 CVE-2021-41785: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attacke Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.

nvd

CVE-2021-41784HIGHCVSS 7.8≥ 11.0, < 11.12022-08-29

CVE-2021-41784 [HIGH] CWE-416 CVE-2021-41784: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attacke Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.

nvd

CVE-2021-41783HIGHCVSS 7.8≥ 11.0, < 11.12022-08-29

CVE-2021-41783 [HIGH] CWE-416 CVE-2021-41783: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attacke Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.

nvd

CVE-2021-40326MEDIUMCVSS 5.5≥ 11.0, < 11.12022-08-29

CVE-2021-40326 [MEDIUM] CWE-347 CVE-2021-40326: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hid Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.

nvd

← Previous11 / 14Next →