CVE-2022-37332-RCE-

Foxit nday : ACTUELLEMENT EN TRAVAUX... TOUT CE QUE J'AI À IMPLÉMENTER, C'EST LE JIT SPRAYING ..... aussi testé sur Version: 9.0.1.1049 donc voilà, je sais pas : profitez-en...

Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

Exploit personnalisé : Foxit Reader version 9.0.1.1049 Use After Free avec contournement d'ASLR et de DEP sur le tas Mon Exploit personnalisé : Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Exploit personnalisé pour Win 7 Dispose d'un espace pour le shellcode...

CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler Use After Free 1. Contexte du format PDF 2. Dictionnaires de chiffrement 3. Détails de la vulnérabilité 4. Contournement d'ASLR et de DEP 5. Détails de l'environnement 6. Déclencheur 7. Auteur Contexte du format PDF PDF est un format de fichier utilisé pou...

PS-2017-13---CVE-2018-9950

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Vulnérabilité Restriction inappropriée des opérations dans les limites d'un tampon mémoire Description de la vulnérabilité Cette vulnérabilité permet à des attaquants distants de divulguer des informations sensibles...

Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco 's third-party vulnerability disclosure policy...

PS-2018-002---CVE-2018-14442

Foxit Reader - CPDFParser::mpCryptoHandler - Use After Free - RCE الثغرة الإشارة إلى الذاكرة بعد تحريرها يمكن أن تؤدي إلى تعطل البرنامج، أو استخدام قيم غير متوقعة، أو تنفيذ تعليمات برمجية. وصف الثغرة تسمح هذه الثغرة للمهاجمين عن بُعد بتنفيذ تعليمات برمجية عشوائية على التثبيتات المعرضة للخطر من...

cve-2018-9951

Vulnérabilité d'exécution de code à distance Use-After-Free de l'objet CPDFObject dans Foxit Reader Vulnérabilité Le fait de référencer de la mémoire après sa libération peut entraîner le plantage d'un programme, l'utilisation de valeurs inattendues ou l'exécution de code. Description de la...

KLA91298 Multiple vulnerabilites in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, gain privileges, write local files, bypass security restrictions. Below is a complete list of vulnerabilities: 1...

Foxit Reader Array resetForm Use-After-Free Vulnerability

Summary A use-after-free vulnerability exists in the way Foxit Reader handles an Array object. A specially crafted JavaScript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick...

CVE-2026-18622

Technical details are not publicly available in the provided documents. Monitor for updates.

KLA91221 OSI vulnerability in Foxit Reader

Information disclosure vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories Foxit Security Bulletins Exploitation Public exploits exist for this vulnerability. Related products...

The vulnerability affects the update service for PDF document viewing software called Foxit PDF Reader (previously Foxit Reader) and the PDF file editing software called Foxit PDF Editor (previously Foxit PhantomPDF). This vulnerability allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the PDF document viewing service in Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileg...

The vulnerability affects the update service for the FoxitPDFReaderUpdater.exe program, which is used for viewing electronic documents in PDF format within the Foxit PDF Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) PDF editing software. This vulnerability allows an attacker to escalate their privileges.

The vulnerability of the FoxitPDFReaderUpdater.exe service, a tool for viewing electronic documents in PDF format within the Foxit PDF Reader formerly Foxit Reader and the Foxit PDF Editor formerly Foxit PhantomPDF, is related to an uncontrolled pathfinding mechanism. Exploiting this vulnerabilit...

Foxit Foxit Reader Javascript checkbox CBF_Widget code execution vulnerability

Summary A code execution vulnerability exists in the Javascript checkbox CBFWidget functionality of Foxit Reader versions: 2026.1.1.36485. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability. Confirmed...

CVE-2026-57242 Foxit PDF Editor/Reader Page Use-After-Free Vulnerability

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the page state changes, the application continuously dereferences invalid objects, eventually leading to a crash...

CVE-2026-57243

CVE-2026-57243 affects Foxit PDF Editor/Reader. A JavaScript reentrancy during page opening and form formatting leads to an inconsistent document status and, with outdated page information, the application accesses invalid addresses, causing a crash. Current details describe the vulnerable operat...

CVE-2026-57244 Foxit PDF Editor/Reader Form Control Use-After-Free Vulnerability

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash...

CVE-2026-57256 Foxit Editor/Reader List Box Format Use-After-Free Vulnerability

When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary...

CVE-2026-57256 Foxit Editor/Reader List Box Format Use-After-Free Vulnerability

When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary...

KLA91132 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free...