Foxit vulnerabilities

We track 241 vulnerabilities in Foxit products across 18 products. 241 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.

241vulnerabilities

2critical

239high

0exploited

8.0average CVSS score

Latest Foxit vulnerabilities

7.8 High severity
PDF Reader: Out-of-bounds Read
CVE-2024-12751Dec 30, 2024Foxit
Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in
8.8 High severity
Foxit Reader: Use After Free
CVE-2024-49576Dec 18, 2024FoxitEPSS 1.14%
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and resul
8.8 High severity
Foxit Reader: Use After Free
CVE-2024-47810Dec 18, 2024FoxitEPSS 1.27%
A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitra
7.1 High severity
PDF Reader: Out-of-bounds Read
CVE-2024-9256Nov 22, 2024Foxit
Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerab
7.8 High severity
PDF Reader: Use After Free
CVE-2024-9255Nov 22, 2024Foxit
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
8.8 High severity
PDF Reader: Use After Free
CVE-2024-9254Nov 22, 2024Foxit
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.1 High severity
PDF Reader: Out-of-bounds Read
CVE-2024-9253Nov 22, 2024Foxit
Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerab
7.8 High severity
PDF Reader: Use After Free
CVE-2024-9252Nov 22, 2024Foxit
Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabilit
7.8 High severity
PDF Reader: Use After Free
CVE-2024-9251Nov 22, 2024Foxit
Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil
7.8 High severity
PDF Reader: Use After Free
CVE-2024-9250Nov 22, 2024Foxit
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that
7.1 High severity
PDF Reader: Out-of-bounds Read
CVE-2024-9249Nov 22, 2024Foxit
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabi
7.8 High severity
PDF Reader: Out-of-bounds Write
CVE-2024-9248Nov 22, 2024Foxit
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerab
7.8 High severity
PDF Reader: Out-of-bounds Write
CVE-2024-9247Nov 22, 2024Foxit
Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability
7.1 High severity
PDF Reader: Out-of-bounds Read
CVE-2024-9246Nov 22, 2024Foxit
Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulner
7.8 High severity
PDF Reader: Incorrect Permission Assignment for Critical Resource
CVE-2024-9245Nov 22, 2024Foxit
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability
7.8 High severity
PDF Reader: Incorrect Permission Assignment for Critical Resource
CVE-2024-9244Nov 22, 2024Foxit
Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability
7.8 High severity
PDF Reader: Use After Free
CVE-2024-9243Nov 22, 2024Foxit
Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in
8.8 High severity
Foxit Reader: Use After Free
CVE-2024-28888Oct 2, 2024FoxitEPSS 2.2%
A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in
8.4 High severity
foxit_pdf_editor: Improper Access Control
CVE-2024-41605Sep 26, 2024Foxit
In Foxit PDF Reader before 2024.3, and PDF Editor before 2024.3 and 13.x before 13.1.4, an attacker can replace an update file with a Trojan horse via side loading, because the update service lacks integrity validation for the updater. Attacker-controlled code
8.8 High severity
PDF Reader: Use After Free
CVE-2024-7725Aug 21, 2024Foxit
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that
8.8 High severity
PDF Reader: Use After Free
CVE-2024-7724Aug 21, 2024Foxit
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that
8.8 High severity
PDF Reader: Use After Free
CVE-2024-7723Aug 21, 2024Foxit
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that
8.2 High severity
Foxit Reader: Improper Certificate Validation
CVE-2024-29072May 28, 2024Foxit
A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result
7.8 High severity
PDF Reader: Access of Resource Using Incompatible Type
CVE-2023-51560May 3, 2024Foxit
Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.8 High severity
PDF Reader: Use After Free
CVE-2023-51557May 3, 2024Foxit
Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in
7.8 High severity
PDF Reader: Use After Free
CVE-2023-51556May 3, 2024Foxit
Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in
7.8 High severity
PDF Reader: Use After Free
CVE-2023-51552May 3, 2024Foxit
Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabili
7.8 High severity
PDF Reader: Use After Free
CVE-2023-51551May 3, 2024Foxit
Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabili
7.8 High severity
PDF Reader: Use After Free
CVE-2023-51549May 3, 2024Foxit
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42097May 3, 2024Foxit
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42096May 3, 2024Foxit
Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42094May 3, 2024Foxit
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42092May 3, 2024Foxit
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42091May 3, 2024Foxit
Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability i
7.1 High severity
PDF Reader: Out-of-bounds Read
CVE-2023-42090May 3, 2024Foxit
Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vu
7.8 High severity
PDF Reader: Use After Free
CVE-2023-42089May 3, 2024Foxit
Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabili
7.8 High severity
PDF Reader: Out-of-bounds Read
CVE-2023-38119May 3, 2024Foxit
Foxit PDF Reader AcroForm signature Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnera
7.8 High severity
PDF Reader: Out-of-bounds Write
CVE-2023-38118May 3, 2024Foxit
Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulne
7.8 High severity
PDF Reader: Use After Free
CVE-2023-38117May 3, 2024Foxit
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil
7.8 High severity
PDF Reader: Use After Free
CVE-2023-38114May 3, 2024Foxit
Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabil