Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

Exploit personnalisé : Foxit Reader version 9.0.1.1049 Use After Free avec contournement d'ASLR et de DEP sur le tas Mon Exploit personnalisé : Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Exploit personnalisé pour Win 7 Dispose d'un espace pour le shellcode...

CVE-2022-37332-RCE-

Foxit nday : ACTUELLEMENT EN TRAVAUX... TOUT CE QUE J'AI À IMPLÉMENTER, C'EST LE JIT SPRAYING ..... aussi testé sur Version: 9.0.1.1049 donc voilà, je sais pas : profitez-en...

CVE-2018-14442

Использование после освобождения CPDFParser::mpCryptoHandler в Foxit Reader 1. Фон формата PDF 2. Словари шифрования 3. Детали уязвимости 4. Обход ASLR и DEP 5. Детали окружения 6. Триггер 7. Автор Фон формата PDF PDF — это формат файла, используемый для представления документов. PDF состоит из...

PS-2017-13---CVE-2018-9950

Уязвимость информационного раскрытия при чтении за пределами границ при разборе PDF в Foxit Reader Уязвимость Неправильное ограничение операций в рамках границ буфера памяти Описание уязвимости Эта уязвимость позволяет удаленным злоумышленникам раскрывать конфиденциальную информацию в уязвимых...

PS-2018-002---CVE-2018-14442

Foxit Reader - CPDFParser::mpCryptoHandler - Use After Free - RCE Vulnérabilité Le fait de référencer de la mémoire après qu'elle a été libérée peut entraîner un plantage du programme, l'utilisation de valeurs inattendues ou l'exécution de code. Description de la vulnérabilité Cette vulnérabilité...

cve-2018-9951

Vulnérabilité d'exécution de code à distance Use-After-Free de l'objet CPDFObject dans Foxit Reader Vulnérabilité Le fait de référencer de la mémoire après sa libération peut entraîner le plantage d'un programme, l'utilisation de valeurs inattendues ou l'exécution de code. Description de la...

KLA91298 Multiple vulnerabilites in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, gain privileges, write local files, bypass security restrictions. Below is a complete list of vulnerabilities: 1...

Foxit Reader Array resetForm Use-After-Free Vulnerability

Summary A use-after-free vulnerability exists in the way Foxit Reader handles an Array object. A specially crafted JavaScript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick...

CVE-2026-18622

Technical details are not publicly available in the provided documents. Monitor for updates.

KLA91221 OSI vulnerability in Foxit Reader

Information disclosure vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories Foxit Security Bulletins Exploitation Public exploits exist for this vulnerability. Related products...

The vulnerability affects the update service for PDF document viewing software called Foxit PDF Reader (previously Foxit Reader) and the PDF file editing software called Foxit PDF Editor (previously Foxit PhantomPDF). This vulnerability allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the PDF document viewing service in Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileg...

The vulnerability affects the update service for the FoxitPDFReaderUpdater.exe program, which is used for viewing electronic documents in PDF format within the Foxit PDF Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) PDF editing software. This vulnerability allows an attacker to escalate their privileges.

The vulnerability of the FoxitPDFReaderUpdater.exe service, a tool for viewing electronic documents in PDF format within the Foxit PDF Reader formerly Foxit Reader and the Foxit PDF Editor formerly Foxit PhantomPDF, is related to an uncontrolled pathfinding mechanism. Exploiting this vulnerabilit...

Foxit Foxit Reader Javascript checkbox CBF_Widget code execution vulnerability

Summary A code execution vulnerability exists in the Javascript checkbox CBFWidget functionality of Foxit Reader versions: 2026.1.1.36485. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability. Confirmed...

CVE-2026-57242 Foxit PDF Editor/Reader Page Use-After-Free Vulnerability

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the page state changes, the application continuously dereferences invalid objects, eventually leading to a crash...

CVE-2026-57243

CVE-2026-57243 affects Foxit PDF Editor/Reader. A JavaScript reentrancy during page opening and form formatting leads to an inconsistent document status and, with outdated page information, the application accesses invalid addresses, causing a crash. Current details describe the vulnerable operat...

CVE-2026-57244 Foxit PDF Editor/Reader Form Control Use-After-Free Vulnerability

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash...

CVE-2026-57256 Foxit Editor/Reader List Box Format Use-After-Free Vulnerability

When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary...

CVE-2026-57256 Foxit Editor/Reader List Box Format Use-After-Free Vulnerability

When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary...

KLA91132 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) allows a perpetrator to execute arbitrary code or disclose protected information.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrar...