PDF Editor vulnerabilities

211 known vulnerabilities in PDF Editor from Foxit. 211 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  PDF Reader: Out-of-bounds Write

  CVE-2024-9248Nov 22, 2024Foxit

  Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerab

• 7.8 High severity

  PDF Reader: Out-of-bounds Write

  CVE-2024-9247Nov 22, 2024Foxit

  Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability

• 7.1 High severity

  PDF Reader: Out-of-bounds Read

  CVE-2024-9246Nov 22, 2024Foxit

  Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulner

• 7.8 High severity

  PDF Reader: Incorrect Permission Assignment for Critical Resource

  CVE-2024-9245Nov 22, 2024Foxit

  Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability

• 7.8 High severity

  PDF Reader: Incorrect Permission Assignment for Critical Resource

  CVE-2024-9244Nov 22, 2024Foxit

  Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2024-9243Nov 22, 2024Foxit

  Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2024-7725Aug 21, 2024Foxit

  Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2024-7724Aug 21, 2024Foxit

  Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2024-7723Aug 21, 2024Foxit

  Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that

• 8.2 High severity

  Foxit Reader: Improper Certificate Validation

  CVE-2024-29072May 28, 2024Foxit

  A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result

• 7.8 High severity

  PDF Reader: Access of Resource Using Incompatible Type

  CVE-2023-51560May 3, 2024Foxit

  Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-51557May 3, 2024Foxit

  Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-51556May 3, 2024Foxit

  Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-51552May 3, 2024Foxit

  Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabili

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-51551May 3, 2024Foxit

  Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabili

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-51549May 3, 2024Foxit

  Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-42097May 3, 2024Foxit

  Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-42096May 3, 2024Foxit

  Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-42094May 3, 2024Foxit

  Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-42092May 3, 2024Foxit

  Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-42091May 3, 2024Foxit

  Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability i

• 7.1 High severity

  PDF Reader: Out-of-bounds Read

  CVE-2023-42090May 3, 2024Foxit

  Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vu

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-42089May 3, 2024Foxit

  Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabili

• 7.8 High severity

  PDF Reader: Out-of-bounds Read

  CVE-2023-38119May 3, 2024Foxit

  Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnera

• 7.8 High severity

  PDF Reader: Out-of-bounds Write

  CVE-2023-38118May 3, 2024Foxit

  Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulne

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-38117May 3, 2024Foxit

  Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-38114May 3, 2024Foxit

  Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-38112May 3, 2024Foxit

  Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability i

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-38111May 3, 2024Foxit

  Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-38107May 3, 2024Foxit

  Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-27366May 3, 2024Foxit

  Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th

• 7.8 High severity

  PDF Editor: Exposed Dangerous Method or Function

  CVE-2023-27365May 3, 2024Foxit

  Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vul

• 7.8 High severity

  PDF Editor: Exposed Dangerous Method or Function

  CVE-2023-27364May 3, 2024Foxit

  Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vul

• 7.8 High severity

  PDF Reader: Exposed Dangerous Method or Function

  CVE-2023-27363May 3, 2024FoxitEPSS 42%

  Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulner

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-27331May 3, 2024FoxitEPSS 3.92%

  Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-27330May 3, 2024FoxitEPSS 3.92%

  Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability i

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2023-27329May 3, 2024FoxitEPSS 3.92%

  Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th

• 8.8 High severity

  Foxit Reader: Use After Free

  CVE-2024-25938Apr 30, 2024FoxitEPSS 15.6%

  A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and r

• 8.8 High severity

  Foxit Reader: Use After Free

  CVE-2024-25648Apr 30, 2024FoxitEPSS 15.6%

  A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and

• 8.8 High severity

  Foxit Reader: Access of Resource Using Incompatible Type

  CVE-2024-25575Apr 30, 2024FoxitEPSS 17.7%

  A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result