PDF Reader vulnerabilities

223 known vulnerabilities in PDF Reader from Foxit. 223 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2022-28674Jul 18, 2022FoxitEPSS 1.14%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2022-28673Jul 18, 2022FoxitEPSS 1.14%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2022-28672Jul 18, 2022FoxitEPSS 1.92%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2022-28671Jul 18, 2022FoxitEPSS 1.14%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 7.8 High severity

  PDF Reader: Out-of-bounds Read

  CVE-2022-28670Jul 18, 2022FoxitEPSS 1.02%

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio

• 7.8 High severity

  PDF Reader: Use After Free

  CVE-2022-28669Jul 18, 2022FoxitEPSS 1.14%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 7.5 High severity

  PDF Editor: Access of Resource Using Incompatible Type

  CVE-2022-30557May 11, 2022FoxitEPSS 4.61%

  Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaScript execution.

• 8.8 High severity

  PDF Reader: Out-of-bounds Read

  CVE-2022-24971Feb 18, 2022FoxitEPSS 2.7%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Out-of-bounds Write

  CVE-2022-24369Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2022-24367Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2022-24366Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2022-24365Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2022-24364Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2022-24363Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2022-24362Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Out-of-bounds Write

  CVE-2022-24361Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2022-24360Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2022-24359Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Out-of-bounds Read

  CVE-2022-24358Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Use After Free

  CVE-2022-24357Feb 18, 2022FoxitEPSS 2.54%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• 8.8 High severity

  PDF Reader: Out-of-bounds Read

  CVE-2022-24356Feb 18, 2022FoxitEPSS 2.34%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open

• 9.8 Critical severity

  PDF Reader: Out-of-bounds Write

  CVE-2022-24954Feb 11, 2022FoxitEPSS 11.9%

  Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings.

• 8.8 High severity

  Foxit: Improper Handling of Exceptional Conditions

  CVE-2022-22150Feb 4, 2022FoxitEPSS 1.8%

  A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception which is improperly handled, leaving the engine in an invalid state, which can lea