Lucene search
+L

6555 matches found

OSV
OSV
•added 2024/04/30 3:15 p.m.•6 views

CVE-2024-25575

A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS5.8AI score0.17716EPSS
SaveExploits1References2
OSV
OSV
•added 2024/04/30 3:15 p.m.•19 views

CVE-2024-25938

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS6AI score0.15639EPSS
SaveExploits1References2
OSV
OSV
•added 2024/04/30 3:15 p.m.•21 views

CVE-2024-25648

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. A...

8.8CVSS8.1AI score0.15639EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/30 3:15 p.m.•18 views

CVE-2024-25575

A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS8.9AI score0.17716EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/30 3:15 p.m.•32 views

CVE-2024-25648

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. A...

8.8CVSS8.9AI score0.15639EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/30 3:15 p.m.•24 views

CVE-2024-25938

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS8.9AI score0.15639EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/04/30 2:38 p.m.•23 views

CVE-2024-25938

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS8.9AI score0.15639EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/04/30 2:38 p.m.•92 views

CVE-2024-25938

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS9.1AI score0.15639EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/30 2:38 p.m.•111 views

CVE-2024-25938

CVE-2024-25938 affects Foxit Reader 2024.1.0.23997 and is a use-after-free vulnerability in the Barcode widget. According to Talos, a specially crafted JavaScript in a malicious PDF can trigger reuse of a freed object, leading to memory corruption and potentially arbitrary code execution. Exploit...

8.8CVSS7.1AI score0.15639EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
•added 2024/04/30 2:38 p.m.•104 views

CVE-2024-25575

A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS9.1AI score0.17716EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/30 2:38 p.m.•98 views

CVE-2024-25648

Foxit Reader 2024.1.0.23997 is affected by a use-after-free in the ComboBox handling that can be triggered when processing JavaScript in a malicious PDF or when visiting a crafted site with the browser plugin enabled. Talos provides concrete details on the vulnerable path: a ComboBox object is fr...

8.8CVSS8.1AI score0.15639EPSS
SaveExploits1References2Affected Software2
Vulnrichment
Vulnrichment
•added 2024/04/30 2:38 p.m.•15 views

CVE-2024-25575

A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS8.9AI score0.17716EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/30 2:38 p.m.•139 views

CVE-2024-25575

Foxit Reader CVE-2024-25575 is a type-confusion vulnerability in the Lock object’s fields handling. Talos documents a type-confusion in Foxit Reader 2024.1.0.23997 that can cause memory corruption and arbitrary code execution via JavaScript in malicious PDFs or a crafted site when the browser plu...

8.8CVSS7.1AI score0.17716EPSS
SaveExploits1References2Affected Software2
Vulnrichment
Vulnrichment
•added 2024/04/30 2:38 p.m.•24 views

CVE-2024-25648

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. A...

8.8CVSS8.1AI score0.15639EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/04/30 2:38 p.m.•109 views

CVE-2024-25648

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. A...

8.8CVSS9.1AI score0.15639EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/04/30 12:00 a.m.•17 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a PDF document reader from the Chinese company Foxit. A resource management error vulnerability exists in Foxit Reader version 2024.1.0.23997, which stems from a post-release reuse vulnerability that could lead to memory corruption and arbitrary code execution...

8.8CVSS8.1AI score0.15639EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/04/30 12:00 a.m.•20 views

Foxit Reader 安全漏洞

Foxit Reader is a PDF document reader from the Chinese company Foxit. A security vulnerability exists in Foxit Reader version 2024.1.0.23997, which stems from a type confusion vulnerability that can lead to memory corruption and arbitrary code execution...

8.8CVSS8.2AI score0.17716EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/04/30 12:00 a.m.•34 views

Foxit Reader 资源管理错误漏洞

Foxit Reader is a PDF document reader from the Chinese company Foxit. A resource management error vulnerability exists in Foxit Reader version 2024.1.0.23997, which stems from a post-release reuse vulnerability that could lead to memory corruption and arbitrary code execution...

8.8CVSS8.1AI score0.15639EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/30 12:00 a.m.•2 views

CVE-2024-25938: Use After Free

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

8.8CVSS6.7AI score0.15639EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/30 12:00 a.m.•2 views

CVE-2024-25648: Use After Free

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. A...

8.8CVSS8.1AI score0.15639EPSS
SaveExploits1References2
Rows per page
Query Builder