Lucene search
+L

2920 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.32 views

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.00389EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.25 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.8AI score0.0045EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.25 views

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6AI score0.00424EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.24 views

Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS6.8AI score0.00438EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.31 views

Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS6.8AI score0.0045EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.26 views

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

7.8CVSS6.8AI score0.00413EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.4 views

PT-2023-4410 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

7.8CVSS8.1AI score0.0045EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.29 views

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS5.9AI score0.00389EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.26 views

Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS5.9AI score0.004EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/07/26 12:0 a.m.22 views

Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.8AI score0.0045EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:0 a.m.47 views

Foxit PDF Reader for Mac < 12.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 12.1.1. It is, therefore affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the JavaScript engine of Foxit Software...

8.8CVSS6.7AI score0.00922EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:0 a.m.46 views

Foxit PDF Editor for Mac < 12.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 12.1.1. It is, therefore affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the JavaScript engine of Foxit...

8.8CVSS6.7AI score0.00922EPSS
SaveExploits1References9
NVD
NVD
added 2023/07/19 2:15 p.m.21 views

CVE-2023-28744

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previously freed memory by manipulating form fields of a specific type. This can lead to memory corruption and arbitrary...

8.8CVSS8.9AI score0.00922EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/19 2:15 p.m.5 views

CVE-2023-28744

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previously freed memory by manipulating form fields of a specific type. This can lead to memory corruption and arbitrary...

8.8CVSS7.2AI score0.00922EPSS
SaveExploits1References2
NVD
NVD
added 2023/07/19 2:15 p.m.15 views

CVE-2023-27379

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS8.8AI score0.01053EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/19 2:15 p.m.4 views

CVE-2023-27379

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS7.2AI score0.01053EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/19 2:15 p.m.4 views

CVE-2023-33866

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS7.2AI score0.00922EPSS
SaveExploits1References2
Prion
Prion
added 2023/07/19 2:15 p.m.25 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previously freed memory by manipulating form fields of a specific type. This can lead to memory corruption and arbitrary...

6.8CVSS8.9AI score0.00922EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/07/19 2:15 p.m.25 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

6.8CVSS8.8AI score0.01053EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/07/19 1:16 p.m.88 views

CVE-2023-28744

Foxit CVE-2023-28744 is a use-after-free in the JavaScript engine of Foxit PDF Reader/Editor. A specially crafted PDF can trigger reuse of freed memory in forms, leading to memory corruption and arbitrary code execution. Exploitation requires user action (opening a malicious PDF) or, if the brows...

8.8CVSS8.8AI score0.00922EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder