CVE-2022-37332-RCE-

Foxit nday : ACTUALMENTE EN TRABAJO... TODO LO QUE NECESITO IMPLEMENTAR ES JIT SPRAYING ..... también probado en Versión: 9.0.1.1049 así que sí, no sé : disfruta...

CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler Use After Free 1. Antecedentes del formato PDF 2. Diccionarios de cifrado 3. Detalles de la vulnerabilidad 4. Omisión de ASLR y DEP 5. Detalles del entorno 6. Disparador 7. Autor Antecedentes del formato PDF PDF es un formato de archivo utilizado para...

PS-2018-002---CVE-2018-14442

Foxit Reader - CPDFParser::mpCryptoHandler - Uso después de liberación - RCE Vulnerabilidad Hacer referencia a memoria después de que ha sido liberada puede provocar que un programa se bloquee, use valores inesperados o ejecute código. Descripción de la vulnerabilidad Esta vulnerabilidad permite ...

cve-2018-9951

Vulnerabilidad de ejecución remota de código por uso después de liberación Use-After-Free de CPDFObject en Foxit Reader Vulnerabilidad Hacer referencia a la memoria después de haber sido liberada puede provocar que un programa se bloquee, use valores inesperados o ejecute código Descripción de la...

Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

Exploit personalizado: Foxit Reader versión 9.0.1.1049 Use After Free con bypass de ASLR y DEP en el heap Mi exploit personalizado: Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Exploit personalizado para Win 7 Tiene espacio para el shellcode Mi cadena ROP...

PS-2017-13---CVE-2018-9950

Vulnerabilidad de divulgación de información por lectura fuera de los límites en el análisis de PDF de Foxit Reader Vulnerabilidad Vulnerabilidad de restricción inadecuada de operaciones dentro de los límites de un búfer de memoria Descripción de la vulnerabilidad Esta vulnerabilidad permite a...

CVE-2026-18622

Technical details are not publicly available in the provided documents. Monitor for updates.

KLA91221 OSI vulnerability in Foxit Reader

Information disclosure vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories Foxit Security Bulletins Exploitation Related products Foxit-Reader Foxit-Reader-Enterprise CVE list...

The vulnerability affects the update service for the FoxitPDFReaderUpdater.exe program, which is used for viewing electronic documents in PDF format within the Foxit PDF Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) PDF editing software. This vulnerability allows an attacker to escalate their privileges.

The vulnerability of the FoxitPDFReaderUpdater.exe service, a tool for viewing electronic documents in PDF format within the Foxit PDF Reader formerly Foxit Reader and the Foxit PDF Editor formerly Foxit PhantomPDF, is related to an uncontrolled pathfinding mechanism. Exploiting this vulnerabilit...

Foxit Foxit Reader Javascript checkbox CBF_Widget code execution vulnerability

Summary A code execution vulnerability exists in the Javascript checkbox CBFWidget functionality of Foxit Reader versions: 2026.1.1.36485. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability. Confirmed...

CVE-2026-57242 Foxit PDF Editor/Reader Page Use-After-Free Vulnerability

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the page state changes, the application continuously dereferences invalid objects, eventually leading to a crash...

CVE-2026-57243

CVE-2026-57243 affects Foxit PDF Editor/Reader. A JavaScript reentrancy during page opening and form formatting leads to an inconsistent document status and, with outdated page information, the application accesses invalid addresses, causing a crash. Current details describe the vulnerable operat...

CVE-2026-57244 Foxit PDF Editor/Reader Form Control Use-After-Free Vulnerability

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash...

CVE-2026-57256 Foxit Editor/Reader List Box Format Use-After-Free Vulnerability

When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary...

CVE-2026-57256 Foxit Editor/Reader List Box Format Use-After-Free Vulnerability

When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary...

KLA91132 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free...

CVE-2026-5937 Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalidargument" exception, ultimately causing the program to terminate...

CVE-2026-5937

CVE-2026-5937 is associated with Foxit PDF Editor/Reader and is caused by insufficient parameter verification that can lead to format errors in files. This triggers an unhandled std::invalid_argument exception, which results in the application terminating (denial of service). The available docume...

CVE-2026-5940

Summary of CVE-2026-5940 : Foxit PDF Editor/Reader contains a use-after-free vulnerability in the annotation flow. The issue arises when a function triggers a UI refresh after removing comments via a script, which may access an invalidated object and cause a crash. The CVE record cites a CVSS v3....

CVE-2026-5939

CVE-2026-5939 describes a use-after-free (UAF) vulnerability in Foxit PDF Editor/Reader triggered by a crafted XFA PDF during the calculate event. The issue affects the application when processing XFA calculate logic, potentially crashing the program and enabling arbitrary code execution. The lin...