cbcvebase.

Foxit Pdf Reader vulnerabilities

342 known vulnerabilities affecting foxit/pdf_reader.

Total CVEs
342
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH262MEDIUM47LOW30

Vulnerabilities

Page 10 of 18
CVE-2022-24907P3HIGHCVSS 7.8fixed in 11.2.1v11.1.0.525432023-03-28
CVE-2022-24907 [HIGH] CWE-125 CVE-2022-24907: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. Crafted data in a JP2 image can t
nvd
CVE-2022-37377P3HIGHCVSS 7.8fixed in 12.0.12023-03-29
CVE-2022-37377 [HIGH] CWE-843 CVE-2022-37377: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JavaScript optimizations. The issue results from an imprope
nvd
CVE-2024-30323P3HIGHCVSS 7.8≤ 2023.3.0.23028v2023.2.0.214082024-04-03
CVE-2024-30323 [HIGH] CWE-125 CVE-2024-30323: Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis
nvd
CVE-2024-30348P3HIGHCVSS 7.8≤ 2023.3.0.63083≤ 2023.3.0.23028+1 more2024-04-02
CVE-2024-30348 [HIGH] CWE-787 CVE-2024-30348: Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vuln Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific
nvd
CVE-2024-30341P3HIGHCVSS 7.8fixed in 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30341 [HIGH] CWE-125 CVE-2024-30341: Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerabili Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw ex
nvd
CVE-2024-30359P3HIGHCVSS 7.8≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30359 [HIGH] CWE-125 CVE-2024-30359: Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerabil Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw e
nvd
CVE-2024-30349P3HIGHCVSS 7.8≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30349 [HIGH] CWE-787 CVE-2024-30349: Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vuln Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific
nvd
CVE-2024-9248P3HIGHCVSS 7.8≤ 2024.2.3.25184v2024.2.2.251702024-11-22
CVE-2024-9248 [HIGH] CWE-787 CVE-2024-9248: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vuln Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl
nvd
CVE-2023-38119P3HIGHCVSS 7.8≤ 12.1.2.15332v12.1.2.153322024-05-03
CVE-2023-38119 [HIGH] CWE-125 CVE-2023-38119: Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability. This vul Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific
nvd
CVE-2023-38118P3HIGHCVSS 7.8≤ 12.1.2.15332v12.1.2.153322024-05-03
CVE-2023-38118 [HIGH] CWE-787 CVE-2023-38118: Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability. This v Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif
nvd
CVE-2023-42089P3HIGHCVSS 7.8≤ 12.1.3.15356v12.1.2.153322024-05-03
CVE-2023-42089 [HIGH] CWE-416 CVE-2023-42089: Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability. This vulnerability a Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla
nvd
CVE-2024-9251P3HIGHCVSS 7.8≤ 2024.2.3.25184v2024.2.2.251702024-11-22
CVE-2024-9251 [HIGH] CWE-416 CVE-2024-9251: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw
nvd
CVE-2024-9252P3HIGHCVSS 7.8≤ 2024.2.3.25184v2024.2.2.251702024-11-22
CVE-2024-9252 [HIGH] CWE-416 CVE-2024-9252: Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability al Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw e
nvd
CVE-2024-9247P3HIGHCVSS 7.8≤ 2024.2.3.25184v2024.2.0.251382024-11-22
CVE-2024-9247 [HIGH] CWE-787 CVE-2024-9247: Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerabil Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exi
nvd
CVE-2023-51560P3HIGHCVSS 7.8≤ 2023.2.0.21408v2023.2.0.214082024-05-03
CVE-2023-51560 [HIGH] CWE-843 CVE-2023-51560: Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability a Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists
nvd
CVE-2024-12751P3HIGHCVSS 7.8≤ 2024.3.0.26795v2024.2.3.251842024-12-30
CVE-2024-12751 [HIGH] CWE-125 CVE-2024-12751: Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis
nvd
CVE-2021-34971P3HIGHCVSS 7.8≤ 11.0.1.49938v11.0.1.499382024-05-07
CVE-2021-34971 [HIGH] CWE-122 CVE-2021-34971: Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Th
nvd
CVE-2026-3779P3HIGHCVSS 7.8≤ 2025.3.0.35737≤ 2025.3.0.695702026-04-01
CVE-2026-3779 [HIGH] CWE-416 CVE-2026-3779: The application's list box calculate array logic keeps stale references to page or form objects afte The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted documents to trigger a use-after-free when the calculation runs and can potentially lead to arbitrary code execution.
nvd
CVE-2025-9326P3HIGHCVSS 7.8fixed in 2025.1.0.27937≤ 2025.1.0.66692+1 more2025-09-02
CVE-2025-9326 [HIGH] CWE-125 CVE-2025-9326: Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulne Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla
nvd
CVE-2025-9329P3HIGHCVSS 7.8fixed in 2025.1.0.27937≤ 2025.1.0.66692+1 more2025-09-02
CVE-2025-9329 [HIGH] CWE-125 CVE-2025-9329: Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulne Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla
nvd
Foxit Pdf Reader vulnerabilities | cvebase