Foxitsoftware vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-41605 In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loadHigh 8.4 · Sep 26, 2024
• CVE-2022-43310 An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraHigh 7.8 · Nov 9, 2022
• CVE-2021-38574 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.Critical 9.8 · Aug 11, 2021
• CVE-2021-38573 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.Critical 9.8 · Aug 11, 2021
• CVE-2021-38572 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.Critical 9.8 · Aug 11, 2021
• CVE-2021-38571 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.High 7.8 · Aug 11, 2021
• CVE-2021-38570 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.Critical 9.1 · Aug 11, 2021
• CVE-2021-38569 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.High 7.5 · Aug 11, 2021
• CVE-2021-38568 An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.Critical 9.8 · Aug 11, 2021
• CVE-2021-38566 An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.High 7.5 · Aug 11, 2021
• CVE-2021-38565 An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.High 7.5 · Aug 11, 2021
• CVE-2021-38564 An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.Critical 9.1 · Aug 11, 2021
• CVE-2021-33794 Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interCritical 9.1 · Aug 11, 2021
• CVE-2021-33793 Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conveCritical 9.8 · Aug 11, 2021
• CVE-2021-33792 Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary.High 7.8 · Jul 9, 2021
• CVE-2021-21822 A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598.High 8.8 · May 10, 2021
• CVE-2020-13548 In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution.High 8.8 · Feb 10, 2021
• CVE-2018-20316 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an High 8.1 · Jan 7, 2021
• CVE-2018-20315 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds High 8.1 · Jan 7, 2021
• CVE-2018-20314 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow orHigh 8.1 · Jan 7, 2021
• CVE-2018-20313 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow oHigh 8.1 · Jan 7, 2021
• CVE-2018-20312 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an High 8.1 · Jan 7, 2021
• CVE-2018-20311 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or aHigh 8.1 · Jan 7, 2021
• CVE-2018-20310 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an High 8.1 · Jan 7, 2021
• CVE-2018-20309 Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow oHigh 8.1 · Jan 7, 2021