Foxit Pdf Reader vulnerabilities
370 known vulnerabilities affecting foxit/pdf_reader.
Total CVEs
370
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH282MEDIUM55LOW30
Vulnerabilities
Page 6 of 19
CVE-2023-42094P3HIGHCVSS 7.8≤ 12.1.3.15356v12.1.3.153562024-05-03
CVE-2023-42094 [HIGH] CWE-416 CVE-2023-42094: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2023-42097P3HIGHCVSS 7.8≤ 12.1.3.15356v12.1.3.153562024-05-03
CVE-2023-42097 [HIGH] CWE-416 CVE-2023-42097: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2023-38107P3HIGHCVSS 7.8≤ 12.1.2.15332fixed in 12.1.0.1229+1 more2024-05-03
CVE-2023-38107 [HIGH] CWE-416 CVE-2023-38107: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2023-38117P3HIGHCVSS 7.8≤ 12.1.2.15332fixed in 12.1.0.1229+1 more2024-05-03
CVE-2023-38117 [HIGH] CWE-416 CVE-2023-38117: Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulner
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific fl
nvd
CVE-2023-38111P3HIGHCVSS 7.8≤ 12.1.2.15332fixed in 12.1.0.1229+1 more2024-05-03
CVE-2023-38111 [HIGH] CWE-416 CVE-2023-38111: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2023-27366P3HIGHCVSS 7.8fixed in 12.1.1.15289v12.1.0.152502024-05-03
CVE-2023-27366 [HIGH] CWE-416 CVE-2023-27366: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2023-38112P3HIGHCVSS 7.8≤ 12.1.2.15332fixed in 12.1.0.1229+1 more2024-05-03
CVE-2023-38112 [HIGH] CWE-416 CVE-2023-38112: Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerabili
Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw ex
nvd
CVE-2023-38114P3HIGHCVSS 7.8≤ 12.1.2.15332v12.1.2.153322024-05-03
CVE-2023-38114 [HIGH] CWE-416 CVE-2023-38114: Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulner
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific fl
nvd
CVE-2024-9243P3HIGHCVSS 7.8≤ 2024.2.2.64388≤ 2024.2.3.25184+1 more2024-11-22
CVE-2024-9243 [HIGH] CWE-416 CVE-2024-9243: Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability
Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2022-24955P3CRITICALCVSS 9.8≤ 11.1.0.525432022-02-11
CVE-2022-24955 [CRITICAL] CWE-427 CVE-2022-24955: Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path E
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.
nvd
CVE-2018-3850P3HIGHCVSS 8.8v9.0.1.10492018-04-23
CVE-2018-3850 [HIGH] CWE-416 CVE-2018-3850: An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF
An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability.
nvd
CVE-2022-28683P3HIGHCVSS 7.8≤ 11.2.1.53537v11.2.1.535372022-07-18
CVE-2022-28683 [HIGH] CWE-416 CVE-2022-28683: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the deletePages method. The issue results from the lack of v
nvd
CVE-2022-37391P3HIGHCVSS 7.8fixed in 12.0.1v11.2.2.535752023-03-29
CVE-2022-37391 [HIGH] CWE-416 CVE-2022-37391: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack o
nvd
CVE-2022-37390P3HIGHCVSS 7.8fixed in 12.0.1v11.2.2.535752023-03-29
CVE-2022-37390 [HIGH] CWE-416 CVE-2022-37390: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack o
nvd
CVE-2022-37385P3HIGHCVSS 7.8fixed in 12.0.1v11.2.1.535372023-03-29
CVE-2022-37385 [HIGH] CWE-416 CVE-2022-37385: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack
nvd
CVE-2022-37384P3HIGHCVSS 7.8fixed in 12.0.1v11.2.1.535372023-03-29
CVE-2022-37384 [HIGH] CWE-416 CVE-2022-37384: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the delay method. The issue results from the lack of validat
nvd
CVE-2022-37389P3HIGHCVSS 7.8fixed in 12.0.1v11.2.2.535752023-03-29
CVE-2022-37389 [HIGH] CWE-416 CVE-2022-37389: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack o
nvd
CVE-2022-37387P3HIGHCVSS 7.8fixed in 12.0.1v11.2.2.535752023-03-29
CVE-2022-37387 [HIGH] CWE-416 CVE-2022-37387: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack o
nvd
CVE-2024-30358P3HIGHCVSS 7.8≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30358 [HIGH] CWE-416 CVE-2024-30358: Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability. This vulnerability al
Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
nvd
CVE-2024-30362P3HIGHCVSS 7.8≤ 2023.3.0.63083≤ 2023.3.0.23028+1 more2024-04-02
CVE-2024-30362 [HIGH] CWE-416 CVE-2024-30362: Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerabi
Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw
nvd