Foxit Pdf Reader vulnerabilities
300 known vulnerabilities affecting foxit/pdf_reader.
Total CVEs
300
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH234MEDIUM33LOW30
Vulnerabilities
Page 5 of 15
CVE-2021-34951LOWCVSS 3.3≤ 11.0.1.49938v11.0.0.498932024-05-07
CVE-2021-34951 [LOW] CWE-457 CVE-2021-34951: Foxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability. This
Foxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
T
cvelistv5nvd
CVE-2023-27363HIGHCVSS 7.8fixed in 12.1.1.15289v12.1.0.152502024-05-03
CVE-2023-27363 [HIGH] CWE-749 CVE-2023-27363: Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vu
Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specifi
cvelistv5nvd
CVE-2023-51560HIGHCVSS 7.8≤ 2023.2.0.21408v2023.2.0.214082024-05-03
CVE-2023-51560 [HIGH] CWE-843 CVE-2023-51560: Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
cvelistv5nvd
CVE-2023-38107HIGHCVSS 7.8≤ 12.1.2.15332fixed in 12.1.0.1229+1 more2024-05-03
CVE-2023-38107 [HIGH] CWE-416 CVE-2023-38107: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
cvelistv5nvd
CVE-2023-42091HIGHCVSS 7.8≤ 12.1.3.15356v12.1.2.153322024-05-03
CVE-2023-42091 [HIGH] CWE-416 CVE-2023-42091: Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerabili
Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw ex
cvelistv5nvd
CVE-2023-42097HIGHCVSS 7.8≤ 12.1.3.15356v12.1.3.153562024-05-03
CVE-2023-42097 [HIGH] CWE-416 CVE-2023-42097: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
cvelistv5nvd
CVE-2023-27366HIGHCVSS 7.8fixed in 12.1.1.15289v12.1.0.152502024-05-03
CVE-2023-27366 [HIGH] CWE-416 CVE-2023-27366: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
cvelistv5nvd
CVE-2023-51549HIGHCVSS 7.8≤ 2023.2.0.21408v12.1.3.153562024-05-03
CVE-2023-51549 [HIGH] CWE-416 CVE-2023-51549: Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulner
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific fl
cvelistv5nvd
CVE-2023-51556HIGHCVSS 7.8≤ 2023.2.0.21408v2023.2.0.214082024-05-03
CVE-2023-51556 [HIGH] CWE-416 CVE-2023-51556: Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability
Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exis
cvelistv5nvd
CVE-2023-38112HIGHCVSS 7.8≤ 12.1.2.15332fixed in 12.1.0.1229+1 more2024-05-03
CVE-2023-38112 [HIGH] CWE-416 CVE-2023-38112: Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerabili
Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw ex
cvelistv5nvd
CVE-2023-27331HIGHCVSS 7.8fixed in 12.1.0.15250v12.0.2.124652024-05-03
CVE-2023-27331 [HIGH] CWE-416 CVE-2023-27331: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
cvelistv5nvd
CVE-2023-42094HIGHCVSS 7.8≤ 12.1.3.15356v12.1.3.153562024-05-03
CVE-2023-42094 [HIGH] CWE-416 CVE-2023-42094: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
cvelistv5nvd
CVE-2023-51552HIGHCVSS 7.8≤ 2023.2.0.21408v12.1.3.153562024-05-03
CVE-2023-51552 [HIGH] CWE-416 CVE-2023-51552: Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnera
Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific fla
cvelistv5nvd
CVE-2023-42089HIGHCVSS 7.8≤ 12.1.3.15356v12.1.2.153322024-05-03
CVE-2023-42089 [HIGH] CWE-416 CVE-2023-42089: Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability. This vulnerability a
Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific fla
cvelistv5nvd
CVE-2023-42092HIGHCVSS 7.8≤ 12.1.3.15356v12.1.2.153322024-05-03
CVE-2023-42092 [HIGH] CWE-416 CVE-2023-42092: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
cvelistv5nvd
CVE-2023-38117HIGHCVSS 7.8≤ 12.1.2.15332fixed in 12.1.0.1229+1 more2024-05-03
CVE-2023-38117 [HIGH] CWE-416 CVE-2023-38117: Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulner
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific fl
cvelistv5nvd
CVE-2023-51551HIGHCVSS 7.8≤ 2023.2.0.21408≤ 2023.2.0.61611+1 more2024-05-03
CVE-2023-51551 [HIGH] CWE-416 CVE-2023-51551: Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnera
Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific fla
cvelistv5nvd
CVE-2023-27329HIGHCVSS 7.8fixed in 12.1.0.15250v12.0.2.124652024-05-03
CVE-2023-27329 [HIGH] CWE-416 CVE-2023-27329: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
cvelistv5nvd
CVE-2023-38114HIGHCVSS 7.8≤ 12.1.2.15332v12.1.2.153322024-05-03
CVE-2023-38114 [HIGH] CWE-416 CVE-2023-38114: Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulner
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific fl
cvelistv5nvd
CVE-2023-42090HIGHCVSS 7.1≤ 12.1.3.15356v12.1.2.153322024-05-03
CVE-2023-42090 [HIGH] CWE-125 CVE-2023-42090: Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulner
Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The spe
cvelistv5nvd