Foxit Reader vulnerabilities
155 known vulnerabilities affecting foxit/reader.
Total CVEs
155
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH129MEDIUM14LOW12
Vulnerabilities
Page 5 of 8
CVE-2019-13320P3HIGHCVSS 7.8v9.5.0.207232019-10-04
CVE-2019-13320 [HIGH] CWE-416 CVE-2019-13320: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of AcroForms. The issue results from the lack of v
nvd
CVE-2021-34831P3HIGHCVSS 7.8v10.1.4.376512021-08-04
CVE-2021-34831 [HIGH] CWE-416 CVE-2021-34831: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.4.37651. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Document objects. The issue results from the lac
nvd
CVE-2020-8847P3HIGHCVSS 7.8v9.7.0.294552020-02-14
CVE-2020-8847 [HIGH] CWE-787 CVE-2020-8847: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of JPEG2000 files. The issue results from the lack o
nvd
CVE-2021-31473P3HIGHCVSS 7.8v10.1.3.375982021-05-21
CVE-2021-31473 [HIGH] CWE-787 CVE-2021-31473: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the browseForDoc function. The issue results from the lack of pr
nvd
CVE-2019-6769P3HIGHCVSS 7.8v9.4.1.168282019-06-03
CVE-2019-6769 [HIGH] CWE-416 CVE-2019-6769: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue result
nvd
CVE-2019-6775P3HIGHCVSS 7.8v9.5.0.207232019-10-04
CVE-2019-6775 [HIGH] CWE-416 CVE-2019-6775: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exportValues method within a AcroForm. The issue results from t
nvd
CVE-2019-6774P3HIGHCVSS 7.8v9.4.1.168282019-10-04
CVE-2019-6774 [HIGH] CWE-416 CVE-2019-6774: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the deleteItemAt method when processing AcroForms. The issue result
nvd
CVE-2019-6767P3HIGHCVSS 7.8v9.4.1.168282019-06-03
CVE-2019-6767 [HIGH] CWE-416 CVE-2019-6767: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method when processing AcroForms. The issue result
nvd
CVE-2019-13327P3HIGHCVSS 7.8v9.5.0.207232019-10-03
CVE-2019-13327 [HIGH] CWE-416 CVE-2019-13327: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of fields within Acroform objects. The issue resul
nvd
CVE-2019-13326P3HIGHCVSS 7.8v9.5.0.207232019-10-03
CVE-2019-13326 [HIGH] CWE-416 CVE-2019-13326: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of fields within Acroform objects. The issue resul
nvd
CVE-2019-13328P3HIGHCVSS 7.8v9.5.0.207232019-10-03
CVE-2019-13328 [HIGH] CWE-416 CVE-2019-13328: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of fields within Acroform objects. The issue resul
nvd
CVE-2019-13332P3HIGHCVSS 7.8v9.6.0.251142019-10-03
CVE-2019-13332 [HIGH] CWE-416 CVE-2019-13332: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of templates in XFA forms. The issue results from
nvd
CVE-2021-31449P3HIGHCVSS 7.8v10.1.1.375762021-05-07
CVE-2021-31449 [HIGH] CWE-415 CVE-2021-31449: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue res
nvd
CVE-2021-31451P3HIGHCVSS 7.8v10.1.1.375762021-05-07
CVE-2021-31451 [HIGH] CWE-416 CVE-2021-31451: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the l
nvd
CVE-2021-31453P3HIGHCVSS 7.8v10.1.1.375762021-05-07
CVE-2021-31453 [HIGH] CWE-416 CVE-2021-31453: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA Forms. The issue results from the lack of va
nvd
CVE-2021-31441P3HIGHCVSS 7.8v10.1.1.375762021-05-07
CVE-2021-31441 [HIGH] CWE-416 CVE-2021-31441: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the l
nvd
CVE-2021-31450P3HIGHCVSS 7.8v10.1.1.375762021-05-07
CVE-2021-31450 [HIGH] CWE-416 CVE-2021-31450: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA forms. The issue results from the lack of va
nvd
CVE-2021-31457P3HIGHCVSS 7.8v10.1.1.375762021-05-07
CVE-2021-31457 [HIGH] CWE-416 CVE-2021-31457: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the l
nvd
CVE-2021-31456P3HIGHCVSS 7.8v10.1.1.375762021-05-07
CVE-2021-31456 [HIGH] CWE-416 CVE-2021-31456: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the l
nvd
CVE-2021-31459P3HIGHCVSS 7.8v10.1.1.375762021-05-07
CVE-2021-31459 [HIGH] CWE-416 CVE-2021-31459: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fo
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA Forms. The issue results from the lack of va
nvd