cve-2018-9951

Foxit Reader CPDFObject の Use-After-Free リモートコード実行の脆弱性 脆弱性 解放された後のメモリを参照すると、プログラムがクラッシュしたり、予期しない値を使用したり、コードを実行したりする可能性があります。 脆弱性の説明 この脆弱性により、リモートの攻撃者が Foxit Reader の脆弱なインストール環境で任意のコードを実行できる可能性があります。この脆弱性を悪用するには、ターゲットが悪意のあるページを訪問するか、悪意のあるファイルを開く必要があるため、ユーザー操作が必要です。 具体的な欠陥は、CPDFObject...

PS-2017-13---CVE-2018-9950

Foxit Reader PDF解析における境界外読み取り情報漏洩の脆弱性 脆弱性 メモリバッファの境界内での操作の不適切な制限の脆弱性 脆弱性の説明 この脆弱性により、リモート攻撃者はFoxit Readerの脆弱なインストール環境において機密情報を漏洩させる可能性があります。この脆弱性を悪用するにはユーザーの操作が必要であり、被害者は悪意のあるページにアクセスするか、悪意のあるファイルを開く必要があります。...

CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler の Use After Free 1. PDF形式の背景 2. 暗号化辞書 3. 脆弱性の詳細 4. ASLR と DEP の回避 5. 環境の詳細 6. トリガー 7. 作者 PDF形式の背景 PDFは文書を表現するためのファイル形式です。PDFは複数のデータオブジェクトで構成されています。 単純なプリミティブオブジェクト 整数、数値、ブール値、Null 複合オブジェクト...

CVE-2022-37332-RCE-

Foxit nday : 現在作業中... 実装に必要なのは JIT SPRAYING だけです..... また、Version: 9.0.1.1049 でテスト済みです。うん、わからないけど : お楽しみください...

Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

カスタムエクスプロイト : Foxit Reader バージョン 9.0.1.1049 ヒープ上でASLRおよびDEPバイパスを伴うUse After Free マイカスタムエクスプロイト : Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Win 7用カスタムエクスプロイト シェルコード用のスペースを確保 カスタムROPチェーンがヒープ内にシェルコード用のスペースを確保 Win 7用...

PS-2018-002---CVE-2018-14442

Foxit Reader - CPDFParser::mpCryptoHandler - Uso dopo liberazione - RCE Vulnerabilità Fare riferimento a memoria dopo che è stata liberata può causare il crash di un programma, l'uso di valori imprevisti o l'esecuzione di codice Descrizione della vulnerabilità Questa vulnerabilità consente a un...

CVE-2026-18622

Technical details are not publicly available in the provided documents. Monitor for updates.

The vulnerability affects the update service for the FoxitPDFReaderUpdater.exe program, which is used for viewing electronic documents in PDF format within the Foxit PDF Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) PDF editing software. This vulnerability allows an attacker to escalate their privileges.

The vulnerability of the FoxitPDFReaderUpdater.exe service, a tool for viewing electronic documents in PDF format within the Foxit PDF Reader formerly Foxit Reader and the Foxit PDF Editor formerly Foxit PhantomPDF, is related to an uncontrolled pathfinding mechanism. Exploiting this vulnerabilit...

CVE-2026-57242 Foxit PDF Editor/Reader Page Use-After-Free Vulnerability

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the page state changes, the application continuously dereferences invalid objects, eventually leading to a crash...

CVE-2026-57243

CVE-2026-57243 affects Foxit PDF Editor/Reader. A JavaScript reentrancy during page opening and form formatting leads to an inconsistent document status and, with outdated page information, the application accesses invalid addresses, causing a crash. Current details describe the vulnerable operat...

CVE-2026-57256 Foxit Editor/Reader List Box Format Use-After-Free Vulnerability

When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary...

KLA91132 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free...

CVE-2026-5937 Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalidargument" exception, ultimately causing the program to terminate...

CVE-2026-5937

CVE-2026-5937 is associated with Foxit PDF Editor/Reader and is caused by insufficient parameter verification that can lead to format errors in files. This triggers an unhandled std::invalid_argument exception, which results in the application terminating (denial of service). The available docume...

CVE-2026-5940

Summary of CVE-2026-5940 : Foxit PDF Editor/Reader contains a use-after-free vulnerability in the annotation flow. The issue arises when a function triggers a UI refresh after removing comments via a script, which may access an invalidated object and cause a crash. The CVE record cites a CVSS v3....

CVE-2026-5939

CVE-2026-5939 describes a use-after-free (UAF) vulnerability in Foxit PDF Editor/Reader triggered by a crafted XFA PDF during the calculate event. The issue affects the application when processing XFA calculate logic, potentially crashing the program and enabling arbitrary code execution. The lin...

Foxit PDF Reader和Foxit PDF Editor 安全漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation in China. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have security vulnerabilities. These vulnerabilities stem from insufficient parameter validation, which...

Foxit PDF Reader和Foxit PDF Editor 输入验证错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. There is a vulnerability in input validation between Foxit PDF Editor and Foxit PDF Reader. This vulnerability stems from parsing logic...

Foxit PDF Reader和Foxit PDF Editor 安全漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Editor and Foxit PDF Reader have security vulnerabilities. These vulnerabilities stem from improper control flow managemen...

Foxit PDF Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...