cbcvebase.

Foxit Pdf Editor vulnerabilities

298 known vulnerabilities affecting foxit/pdf_editor.

Total CVEs
298
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH220MEDIUM45LOW30

Vulnerabilities

Page 12 of 15
CVE-2024-30335P4HIGHCVSS 7.1≤ 11.2.8.53842≥ 12.0.0, ≤ 12.1.4.15400+2 more2024-04-02
CVE-2024-30335 [HIGH] CWE-125 CVE-2024-30335: Foxit PDF Reader AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This v Foxit PDF Reader AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Th
nvd
CVE-2025-55311P4MEDIUMCVSS 6.5≤ 13.1.7.63027≥ 2023.1.0.55583, ≤ 2023.3.0.63083+6 more2025-12-11
CVE-2025-55311 [MEDIUM] CWE-347 CVE-2025-55311: An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 20 An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can use JavaScript to alter annotation content and subsequently clear the file's modification status via JavaScript interfaces. This circumvents digital signature verification by hiding document modifications, allowing an attacker
nvd
CVE-2024-9246P4HIGHCVSS 7.1≤ 11.2.10.53951≥ 12.0, ≤ 12.1.7.15526+3 more2024-11-22
CVE-2024-9246 [HIGH] CWE-125 CVE-2024-9246: Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerabil Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific
nvd
CVE-2023-42090P4HIGHCVSS 7.1≤ 10.1.12.37872≥ 11.0.0, ≤ 11.2.7.53812+2 more2024-05-03
CVE-2023-42090 [HIGH] CWE-125 CVE-2023-42090: Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulner Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The spe
nvd
CVE-2024-9253P4HIGHCVSS 7.1≤ 11.2.10.53951≥ 12.0, ≤ 12.1.7.15526+3 more2024-11-22
CVE-2024-9253 [HIGH] CWE-125 CVE-2024-9253: Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerabilit Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl
nvd
CVE-2024-9256P4HIGHCVSS 7.1≤ 11.2.10.53951≥ 12.0, ≤ 12.1.7.15526+3 more2024-11-22
CVE-2024-9256 [HIGH] CWE-125 CVE-2024-9256: Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerabilit Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl
nvd
CVE-2025-55308P4MEDIUMCVSS 6.7≤ 13.1.7.23637≥ 2023.1.0.15510, ≤ 2023.3.0.23028+2 more2025-12-11
CVE-2025-55308 [MEDIUM] CWE-416 CVE-2025-55308: An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A cr An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScript that calls closeDoc() while internal objects are still in use can cause premature release of these objects. This use-after-free vulnerability may lead to memory corruption, potentially resulting in information disclosur
nvd
CVE-2025-55309P4MEDIUMCVSS 6.7≤ 13.1.7.63027≥ 2023.1.0.55583, ≤ 2023.3.0.63083+6 more2025-12-11
CVE-2025-55309 [MEDIUM] CWE-416 CVE-2025-55309: An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 20 An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can contain JavaScript that attaches an OnBlur action on a form field that destroys an annotation. During user right-click interaction, the program's internal focus change handling prematurely releases the annotation object, result
nvd
CVE-2022-47881P4MEDIUMCVSS 6.5≤ 10.1.8.37795≥ 11.0.0, ≤ 11.2.2.535752023-01-18
CVE-2022-47881 [MEDIUM] CWE-125 CVE-2022-47881: Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability. Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.
nvd
CVE-2022-28681P4MEDIUMCVSS 6.1≤ 10.1.7.37777≥ 11.0, ≤ 11.2.1.535372022-07-18
CVE-2022-28681 [MEDIUM] CWE-125 CVE-2022-28681: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the deletePages method. By performing actions in J
nvd
CVE-2022-37386P4MEDIUMCVSS 5.5fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29
CVE-2022-37386 [MEDIUM] CWE-125 CVE-2022-37386: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the resetForm method. By performing actions in Jav
nvd
CVE-2022-37382P4MEDIUMCVSS 5.5fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29
CVE-2022-37382 [MEDIUM] CWE-416 CVE-2022-37382: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeIcon method. The issue results from the
nvd
CVE-2022-37379P4MEDIUMCVSS 5.5fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29
CVE-2022-37379 [MEDIUM] CWE-416 CVE-2022-37379: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the AFSpecial_KeystrokeEx method.
nvd
CVE-2021-34976P4MEDIUMCVSS 5.5≤ 10.1.5.37672v11.0.0.49893+1 more2024-05-07
CVE-2021-34976 [MEDIUM] CWE-416 CVE-2021-34976: Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerab Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The spe
nvd
CVE-2021-34969P4MEDIUMCVSS 5.5≤ 10.1.5.37672v11.0.0.49893+1 more2024-05-07
CVE-2021-34969 [MEDIUM] CWE-416 CVE-2021-34969: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific f
nvd
CVE-2021-34972P4MEDIUMCVSS 5.5≤ 10.1.5.37672v11.0.0.49893+1 more2024-05-07
CVE-2021-34972 [MEDIUM] CWE-416 CVE-2021-34972: Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability al Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl
nvd
CVE-2026-5941P4HIGHCVSS 7.1≥ 14.0.0, < 14.0.4≥ 2023.0.0, < 2026.1.12026-04-27
CVE-2026-5941 [HIGH] CWE-20 CVE-2026-5941: Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction.
nvd
CVE-2022-43640P4MEDIUMCVSS 5.5fixed in 10.1.10≥ 11.0.0, < 11.2.4+1 more2023-03-29
CVE-2022-43640 [MEDIUM] CWE-125 CVE-2022-43640: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF fi
nvd
CVE-2022-37380P4MEDIUMCVSS 5.5fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29
CVE-2022-37380 [MEDIUM] CWE-125 CVE-2022-37380: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of ADBC objects. By performing action
nvd
CVE-2022-37383P4MEDIUMCVSS 5.5fixed in 10.1.9≥ 11.0.0, < 11.2.3+1 more2023-03-29
CVE-2022-37383 [MEDIUM] CWE-125 CVE-2022-37383: This vulnerability allows remote attackers to disclose sensitive information on affected installatio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. By performing actions
nvd
← Previous12 / 15Next →
Foxit Pdf Editor vulnerabilities | cvebase