Foxit Pdf Reader vulnerabilities
301 known vulnerabilities affecting foxit/pdf_reader.
Total CVEs
301
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH235MEDIUM33LOW30
Vulnerabilities
Page 9 of 16
CVE-2024-30345HIGHCVSS 7.8≤ 2023.3.0.63083≤ 2023.3.0.23028+1 more2024-04-02
CVE-2024-30345 [HIGH] CWE-416 CVE-2024-30345: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability all
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists w
cvelistv5nvd
CVE-2024-30344HIGHCVSS 7.8≥ 2023.2.0.21408, ≤ 2023.3.0.63083≥ 2023.2.0.21408, ≤ 2023.3.0.23028+1 more2024-04-02
CVE-2024-30344 [HIGH] CWE-416 CVE-2024-30344: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability all
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists w
cvelistv5nvd
CVE-2024-30353HIGHCVSS 7.8≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30353 [HIGH] CWE-125 CVE-2024-30353: Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability
Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exis
cvelistv5nvd
CVE-2024-30336HIGHCVSS 7.8≤ 2023.3.0.63083≤ 2023.3.0.23028+1 more2024-04-02
CVE-2024-30336 [HIGH] CWE-416 CVE-2024-30336: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability all
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists w
cvelistv5nvd
CVE-2024-30338HIGHCVSS 7.8≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30338 [HIGH] CWE-416 CVE-2024-30338: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability a
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
cvelistv5nvd
CVE-2024-30354HIGHCVSS 7.8≤ 2023.3.0.63083≤ 2023.3.0.23028+1 more2024-04-02
CVE-2024-30354 [HIGH] CWE-416 CVE-2024-30354: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability all
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists w
cvelistv5nvd
CVE-2024-30358HIGHCVSS 7.8≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30358 [HIGH] CWE-416 CVE-2024-30358: Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability. This vulnerability al
Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists
cvelistv5nvd
CVE-2024-30367HIGHCVSS 7.8≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30367 [HIGH] CWE-416 CVE-2024-30367: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability all
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists w
cvelistv5nvd
CVE-2024-30357HIGHCVSS 7.8≤ 2023.3.0.63083≤ 2023.3.0.23028+1 more2024-04-02
CVE-2024-30357 [HIGH] CWE-843 CVE-2024-30357: Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability. This vulner
Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific fl
cvelistv5nvd
CVE-2024-30371HIGHCVSS 7.8≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30371 [HIGH] CWE-416 CVE-2024-30371: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability all
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists w
cvelistv5nvd
CVE-2024-30351HIGHCVSS 7.8≤ 2023.3.0.63083≤ 2023.3.0.23028+1 more2024-04-02
CVE-2024-30351 [HIGH] CWE-416 CVE-2024-30351: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability all
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists w
cvelistv5nvd
CVE-2024-30348HIGHCVSS 7.8≤ 2023.3.0.63083≤ 2023.3.0.23028+1 more2024-04-02
CVE-2024-30348 [HIGH] CWE-787 CVE-2024-30348: Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vuln
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific
cvelistv5nvd
CVE-2024-30337HIGHCVSS 7.8≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30337 [HIGH] CWE-416 CVE-2024-30337: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability all
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists w
cvelistv5nvd
CVE-2024-30363MEDIUMCVSS 5.5≤ 2023.3.0.63083≤ 2023.3.0.23028+1 more2024-04-02
CVE-2024-30363 [MEDIUM] CWE-125 CVE-2024-30363: Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vuln
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The
cvelistv5nvd
CVE-2024-30356LOWCVSS 3.3≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30356 [LOW] CWE-125 CVE-2024-30356: Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerabilit
Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific f
cvelistv5nvd
CVE-2024-30347LOWCVSS 3.3fixed in 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30347 [LOW] CWE-125 CVE-2024-30347: Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vuln
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The sp
cvelistv5nvd
CVE-2024-30350LOWCVSS 3.3≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30350 [LOW] CWE-125 CVE-2024-30350: Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerabil
Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific
cvelistv5nvd
CVE-2024-30364LOWCVSS 3.3≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30364 [LOW] CWE-125 CVE-2024-30364: Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vuln
Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The sp
cvelistv5nvd
CVE-2024-30340LOWCVSS 3.3≤ 2023.3.0.23028v2023.3.0.230282024-04-02
CVE-2024-30340 [LOW] CWE-125 CVE-2024-30340: Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerabil
Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific
cvelistv5nvd
CVE-2024-25858HIGHCVSS 8.4fixed in 2024.42024-03-05
CVE-2024-25858 [HIGH] CWE-450 CVE-2024-25858: In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could
In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters of commands.
nvd