Foxitsoftware Phantompdf vulnerabilities
549 known vulnerabilities affecting foxitsoftware/phantompdf.
Total CVEs
549
CISA KEV
0
Public exploits
4
Exploited in wild
0
Severity breakdown
CRITICAL26HIGH438MEDIUM68LOW17
Vulnerabilities
Page 28 of 28
CVE-2021-31444P4LOWCVSS 3.3≤ 9.7.5.29616≥ 10.0.0.0, ≤ 10.1.3.375982021-05-07
CVE-2021-31444 [LOW] CWE-125 CVE-2021-31444: This vulnerability allows remote attackers to disclose sensitive information on affected installatio
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The is
nvd
CVE-2021-31448P4LOWCVSS 3.3≤ 9.7.5.29616≥ 10.0.0.0, ≤ 10.1.3.375982021-05-07
CVE-2021-31448 [LOW] CWE-125 CVE-2021-31448: This vulnerability allows remote attackers to disclose sensitive information on affected installatio
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The is
nvd
CVE-2021-31445P4LOWCVSS 3.3≤ 9.7.5.29616≥ 10.0.0.0, ≤ 10.1.3.375982021-05-07
CVE-2021-31445 [LOW] CWE-125 CVE-2021-31445: This vulnerability allows remote attackers to disclose sensitive information on affected installatio
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The is
nvd
CVE-2021-31443P4LOWCVSS 3.3≤ 9.7.5.29616≥ 10.0.0.0, ≤ 10.1.3.375982021-05-07
CVE-2021-31443 [LOW] CWE-125 CVE-2021-31443: This vulnerability allows remote attackers to disclose sensitive information on affected installatio
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The is
nvd
CVE-2021-31447P4LOWCVSS 3.3≤ 9.7.5.29616≥ 10.0.0.0, ≤ 10.1.3.375982021-05-07
CVE-2021-31447 [LOW] CWE-125 CVE-2021-31447: This vulnerability allows remote attackers to disclose sensitive information on affected installatio
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The is
nvd
CVE-2021-27262P4LOWCVSS 3.3≤ 10.1.0.375272021-03-30
CVE-2021-27262 [LOW] CWE-125 CVE-2021-27262: This vulnerability allows remote attackers to disclose sensitive information on affected installatio
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. Th
nvd
CVE-2021-27265P4LOWCVSS 3.3≤ 10.1.0.375272021-03-30
CVE-2021-27265 [LOW] CWE-125 CVE-2021-27265: This vulnerability allows remote attackers to disclose sensitive information on affected installatio
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. Th
nvd
CVE-2019-5005P4MEDIUMCVSS 5.5fixed in 9.42019-01-03
CVE-2019-5005 [MEDIUM] CWE-787 CVE-2019-5005: An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service (application crash) via image data, because two bytes are written to the end of the allocated memory without judging whether this will cause corruption.
nvd
CVE-2019-20835P4MEDIUMCVSS 4.3fixed in 9.52020-06-04
CVE-2019-20835 [MEDIUM] CVE-2019-20835: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling.
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling.
nvd
← Previous28 / 28