Foxit Pdf Editor vulnerabilities
326 known vulnerabilities affecting foxit/pdf_editor.
Total CVEs
326
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH240MEDIUM53LOW30
Vulnerabilities
Page 2 of 17
CVE-2022-24356P3HIGHCVSS 8.8fixed in 11.1.0.09252022-02-18
CVE-2022-24356 [HIGH] CWE-125 CVE-2022-24356: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the OnMouseExit method. The issue results
nvd
CVE-2022-24971P3HIGHCVSS 8.8≤ 10.1.6.37749≥ 11.0.0.49893, ≤ 11.2.0.534152022-02-18
CVE-2022-24971 [HIGH] CWE-125 CVE-2022-24971: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the l
nvd
CVE-2022-24358P3HIGHCVSS 8.8≤ 10.1.6.37749≥ 11.0.0.49893, ≤ 11.2.0.534152022-02-18
CVE-2022-24358 [HIGH] CWE-125 CVE-2022-24358: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. By performing actions in JavaSc
nvd
CVE-2026-91800P3HIGHCVSS 8.8≤ 13.2.6.63484≥ 14.0.0.68868, ≤ 14.0.7.69441+4 more2026-09-23
CVE-2026-91800 [HIGH] CWE-732 CVE-2026-91800: A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due
A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.
nvd
CVE-2022-24369P3HIGHCVSS 8.8≤ 10.1.6.37749≥ 11.0.0.49893, ≤ 11.2.0.534152022-02-18
CVE-2022-24369 [HIGH] CWE-787 CVE-2022-24369: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. Crafted data in a JP2 image can t
nvd
CVE-2023-27331P3HIGHCVSS 7.8fixed in 10.1.10.37854≥ 11.0.0.49893, < 11.2.4.53774+1 more2024-05-03
CVE-2023-27331 [HIGH] CWE-416 CVE-2023-27331: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2023-27329P3HIGHCVSS 7.8fixed in 10.1.10.37854≥ 11.0.0.49893, < 11.2.4.53774+1 more2024-05-03
CVE-2023-27329 [HIGH] CWE-416 CVE-2023-27329: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2023-27330P3HIGHCVSS 7.8fixed in 10.1.10.37854≥ 11.0.0.49893, < 11.2.4.53774+1 more2024-05-03
CVE-2023-27330 [HIGH] CWE-416 CVE-2023-27330: Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerabili
Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw ex
nvd
CVE-2024-47810P3HIGHCVSS 8.8≤ 11.2.11.54113≥ 12.0.0, ≤ 12.1.8.15703+3 more2024-12-18
CVE-2024-47810 [HIGH] CWE-416 CVE-2024-47810: A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page objec
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to tri
nvd
CVE-2024-49576P3HIGHCVSS 8.8≤ 11.2.11.54113≥ 12.0.0, ≤ 12.1.8.15703+3 more2024-12-18
CVE-2024-49576 [HIGH] CWE-416 CVE-2024-49576: A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious
nvd
CVE-2025-13941P3HIGHCVSS 8.8≤ 13.2.1.23955≥ 14.0.0.33046, ≤ 14.0.1.33197+3 more2025-12-19
CVE-2025-13941 [HIGH] CWE-732 CVE-2025-13941: A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. Dur
A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system permissions are assigned to resources used by the update service. A local attacker with low privileges could modify or replace these resources, which are later executed by the service, resulting in executio
nvd
CVE-2022-28672P3HIGHCVSS 7.8≤ 10.1.7.37777≥ 11.0, ≤ 11.2.1.535372022-07-18
CVE-2022-28672 [HIGH] CWE-416 CVE-2022-28672: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack
nvd
CVE-2026-91812P3HIGHCVSS 8.1≤ 13.2.5.63482≥ 14.0.0.33046, ≤ 14.0.7.33751+4 more2026-09-23
CVE-2026-91812 [HIGH] CWE-295 CVE-2026-91812: A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to
A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling arbitrary code execution with system privileges.
nvd
CVE-2024-9255P3HIGHCVSS 7.8≤ 11.2.10.53951≥ 12.0, ≤ 12.1.7.15526+3 more2024-11-22
CVE-2024-9255 [HIGH] CWE-416 CVE-2024-9255: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists w
nvd
CVE-2024-9250P3HIGHCVSS 7.8≤ 11.2.10.53951≥ 12.0, ≤ 12.1.7.15526+3 more2024-11-22
CVE-2024-9250 [HIGH] CWE-416 CVE-2024-9250: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability all
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists wit
nvd
CVE-2024-30326P3HIGHCVSS 7.8≤ 10.1.12.37872≥ 11.0.0.49893, ≤ 11.2.8.53842+3 more2024-04-03
CVE-2024-30326 [HIGH] CWE-416 CVE-2024-30326: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2024-30334P3HIGHCVSS 7.8fixed in 10.1.12.37872≥ 11.0.0.49893, < 11.2.8.53842+3 more2024-04-03
CVE-2024-30334 [HIGH] CWE-416 CVE-2024-30334: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2024-30325P3HIGHCVSS 7.8≤ 10.1.12.37872≥ 11.0.0.49893, ≤ 11.2.8.53842+3 more2024-04-03
CVE-2024-30325 [HIGH] CWE-416 CVE-2024-30325: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability all
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists w
nvd
CVE-2024-30332P3HIGHCVSS 7.8fixed in 10.1.12.37872≥ 11.0.0.49893, < 11.2.8.53842+3 more2024-04-03
CVE-2024-30332 [HIGH] CWE-416 CVE-2024-30332: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2024-30324P3HIGHCVSS 7.8≤ 11.1.6.0109≥ 12.0.0.0601, ≤ 12.1.2.55366+7 more2024-04-03
CVE-2024-30324 [HIGH] CWE-416 CVE-2024-30324: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd