VendorsFoxitpdf_readerany version
Vulnerabilities

Foxit PDF Reader any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

320CVEs
CVE-2022-37390
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17551.
Published 2023-03-29 · Modified
7.8EPSS 0.010
CVE-2022-37389
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17545.
Published 2023-03-29 · Modified
7.8EPSS 0.010
CVE-2022-37388
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17516.
Published 2023-03-29 · Modified
7.8EPSS 0.010
CVE-2022-37378
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the optimization of JavaScript functions. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16867.
Published 2023-03-29 · Modified
7.8EPSS 0.010
CVE-2022-37381
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AFSpecial_KeystrokeEx method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17110.
Published 2023-03-29 · Modified
7.8EPSS 0.010
CVE-2022-37384
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the delay method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17327.
Published 2023-03-29 · Modified
7.8EPSS 0.010
CVE-2022-37385
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17301.
Published 2023-03-29 · Modified
7.8EPSS 0.010
CVE-2022-24907
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. Crafted data in a JP2 image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16186.
Published 2023-03-28 · Modified
7.8EPSS 0.010
CVE-2022-24908
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 images. Crafted data in a JP2 image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16187.
Published 2023-03-28 · Modified
7.8EPSS 0.010
CVE-2022-28670
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of AcroForms. Crafted data in an AcroForm can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-16523.
Published 2022-07-18 · Modified
7.8EPSS 0.010
CVE-2022-37377
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JavaScript optimizations. The issue results from an improper optimization, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16733.
Published 2023-03-29 · Modified
7.8EPSS 0.010
CVE-2022-43641
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-18894.
Published 2023-03-29 · Modified
7.8EPSS 0.010
CVE-2024-30326
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30328
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30325
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30322
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30324
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30332
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30331
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30333
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30334
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30330
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30327
Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30323
Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.009
CVE-2024-30366
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-03 · Analyzed
7.8EPSS 0.008
CVE-2024-30367
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30371
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30365
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30352
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30339
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30360
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30351
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30344
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30336
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30358
Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30345
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30346
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30361
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30362
Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
CVE-2024-30354
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Published 2024-04-02 · Analyzed
7.8EPSS 0.008
← Prev3 / 8Next →