CVE-2024-49576

🗓️ 18 Dec 2024 15:57:33Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 74 Views

Use-after-free vulnerability in Foxit Reader allows code execution via malicious PDF or site.

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2024-49576	18 Dec 202415:59	–	circl
CNNVD	Foxit Reader 安全漏洞	18 Dec 202400:00	–	cnnvd
CNVD	Foxit Reader memory corruption vulnerability (CNVD-2025-0095609)	20 Dec 202400:00	–	cnvd
Cvelist	CVE-2024-49576	18 Dec 202415:57	–	cvelist
EUVD	EUVD-2024-43772	3 Oct 202520:07	–	euvd
Tenable Nessus	Foxit PDF Editor < 13.1.5 / 2024.4 Multiple Vulnerabilities	17 Dec 202400:00	–	nessus
Tenable Nessus	Foxit PDF Reader < 2024.4 Multiple Vulnerabilities	17 Dec 202400:00	–	nessus
Kaspersky	KLA78282 Multiple vulnerabilities in Foxit Reader	17 Dec 202400:00	–	kaspersky
NCSC	Vulnerabilities fixed in Foxit PDF Reader and PDF Editor	31 Dec 202409:22	–	ncsc
NVD	CVE-2024-49576	18 Dec 202416:15	–	nvd

NVD

Vulners

Node

foxit pdf_editorRange≤11.2.11.54113

foxit pdf_editorRange12.0.0–12.1.8.15703

foxit pdf_editorRange13.0.0–13.1.4.23147

foxit pdf_editorRange2023.1.0.15510–2023.3.0.23028

foxit pdf_editorRange2024.1.0.23997–2024.3.0.26795

foxit pdf_readerRange≤2024.3.0.26795

AND

microsoft windowsMatch-

[
  {
    "vendor": "Foxit",
    "product": "Foxit Reader",
    "versions": [
      {
        "version": "2024.3.0.26795",
        "status": "affected"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2024-2093
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2024-2093

25 Aug 2025 18:06Current

7.7High risk

Vulners AI Score7.7

CVSS 3.18.8

EPSS0.00137

SSVC

CWE-416