CVE-2022-28679

CVE-2022-28679 affects Foxit PDF Reader 11.2.1.53537. The vulnerability is in the handling of Annotation objects and stems from not validating the existence of an object before performing operations, enabling remote code execution in the current process when a user opens a malicious file or visit...

CVE-2022-28678

CVE-2022-28678 affects Foxit PDF Reader 11.2.1.53537. The flaw is in the handling of Doc objects, where the code does not validate the existence of an object before performing operations, enabling arbitrary code execution in the context of the current process. Exploitation requires user interacti...

CVE-2022-28677

CVE-2022-28677 affects Foxit PDF Reader 11.2.1.53537. The flaw lies in how Annotation objects are handled: the code fails to validate the existence of an object before operating on it, enabling remote code execution when a user opens a malicious page or file and interacts with it. The vulnerabili...

CVE-2022-28677

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28676

Foxit PDF Reader 11.2.1.53537 is affected by a Doc object handling flaw that allows code execution when a user opens a malicious file or visits a malicious page. The vulnerability (CVE-2022-28676) requires user interaction and can execute code in the current process context; exploit referenced as...

CVE-2022-28675

Foxit PDF Reader 11.2.1.53537 is affected by CVE-2022-28675, a vulnerability in handling Annotation objects that allows remote code execution after user visits a malicious page/file. The flaw stems from not validating object existence before operations, enabling code execution in the current proc...

CVE-2022-28674

CVE-2022-28674 affects Foxit PDF Reader 11.2.1.53537, where a flaw in the handling of Annotation objects can lead to remote code execution if a user opens a malicious file or visits a malicious page. The underlying issue is the lack of validating an object's existence before performing operations...

CVE-2022-28674

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28673

Foxit PDF Reader 11.2.1.53537 is affected by CVE-2022-28673 due to a Doc object handling flaw and missing validation when operating on Doc objects, enabling remote code execution with user interaction (visiting a malicious page or opening a malicious file). Exploitation can run code in the curren...

CVE-2022-28672

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28672

Foxit PDF Reader 11.2.1.53537 is affected by CVE-2022-28672 due to improper validation of object existence in Doc objects, enabling arbitrary code execution with user interaction (open a malicious file/page). Root cause: memory/object handling flaw in Doc objects. Impact: remote code execution in...

CVE-2022-28671

Foxit PDF Reader 11.2.1.53537 is affected by CVE-2022-28671 due to improper validation of Doc objects, enabling code execution in the current process when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction (UI:R) and the attack vector is Local with hi...

CVE-2022-28670

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-28670

Foxit PDF Reader 11.2.1.53537 is affected by CVE-2022-28670 due to a flaw in AcroForms handling that can trigger a read past the end of an allocated buffer, enabling disclosure of sensitive data and potentially enabling arbitrary code execution when combined with other vulnerabilities. Concrete d...

CVE-2022-28669

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28669

CVE-2022-28669 affects Foxit PDF Reader 11.2.1.53537. The flaw lies in handling of Doc objects where the existence of an object is not validated before operations, enabling remote code execution in the current process. Exploitation requires user interaction (visiting a malicious page or opening a...

CVE-2022-34900

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 39313 Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

CVE-2022-34890

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 51537. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2022-34902

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 39316 Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

CVE-2022-34891

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...