Lucene search
K

3046 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.11 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.7AI score0.01759EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/09/26 12:0 a.m.5 views

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PD...

7.8CVSS6.8AI score0.01282EPSS
Exploits0References1
CVE
CVE
added 2024/09/26 12:0 a.m.52 views

CVE-2024-41605

CVE-2024-41605 affects Foxit PDF Reader before 2024.3 and Foxit PDF Editor before 2024.3, and 13.x before 13.1.4. The issue is that the updater lacks integrity validation, allowing an attacker to replace an update file with a Trojan horse and execute attacker-controlled code via side loading. Thi...

8.4CVSS8.4AI score0.00049EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/09/24 12:0 a.m.23 views

Foxit PDF Reader < 2024.2.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2024.2.3. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability. This...

8.8CVSS6AI score0.03273EPSS
Exploits0References5
The Hacker News
The Hacker News
added 2024/09/18 9:32 a.m.25 views

North Korean Hackers Target Energy and Aerospace Industries with New MISTPEN Malware

A North Korea-linked cyber-espionage group has been observed leveraging job-themed phishing lures to target prospective victims in energy and aerospace verticals and infect them with a previously undocumented backdoor dubbed MISTPEN. The activity cluster is being tracked by Google-owned Mandiant...

7.3AI score
Exploits0
Positive Technologies
Positive Technologies
added 2024/09/13 12:0 a.m.2 views

PT-2024-10214 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the target mus...

7.8CVSS7.4AI score0.03436EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2024/08/27 12:0 a.m.1 views

PT-2024-6706 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

7.1CVSS7.6AI score0.00349EPSS
Exploits0References8
CNVD
CNVD
added 2024/08/22 12:0 a.m.6 views

Foxit PDF Reader Code Execution Vulnerability (CNVD-2024-40815)

Foxit PDF Reader is a PDF document reader and printer with fast startup speed and rich features. A code execution vulnerability exists in Foxit PDF Reader, which can be exploited by an attacker to execute arbitrary code on the system...

8.8CVSS7.7AI score0.03273EPSS
Exploits0References1
CNVD
CNVD
added 2024/08/22 12:0 a.m.7 views

Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2024-40814)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A resource management error vulnerability exists in Foxit PDF Reader, which can be exploited by an attacker to execute code in the context of the current process...

8.8CVSS6.8AI score0.03273EPSS
Exploits0References1
CNVD
CNVD
added 2024/08/22 12:0 a.m.8 views

Foxit PDF Reader Code Execution Vulnerability (CNVD-2024-40816)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A code execution vulnerability exists in Foxit PDF Reader, which can be exploited by an attacker to execute arbitrary code on the system...

8.8CVSS7.7AI score0.03273EPSS
Exploits0References1
OSV
OSV
added 2024/08/21 4:15 p.m.0 views

CVE-2024-7725

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

8.8CVSS7.6AI score0.03273EPSS
Exploits0References2
NVD
NVD
added 2024/08/21 4:15 p.m.16 views

CVE-2024-7725

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

8.8CVSS0.03273EPSS
Exploits0References2
OSV
OSV
added 2024/08/21 4:15 p.m.1 views

CVE-2024-7722

Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

4.3CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2024/08/21 4:15 p.m.2 views

CVE-2024-7723

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

8.8CVSS6.2AI score0.03273EPSS
Exploits0References2
NVD
NVD
added 2024/08/21 4:15 p.m.16 views

CVE-2024-7723

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

8.8CVSS0.03273EPSS
Exploits0References2
NVD
NVD
added 2024/08/21 4:15 p.m.14 views

CVE-2024-7724

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

8.8CVSS0.03273EPSS
Exploits0References2
OSV
OSV
added 2024/08/21 4:15 p.m.0 views

CVE-2024-7724

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

8.8CVSS7.6AI score0.03273EPSS
Exploits0References2
NVD
NVD
added 2024/08/21 4:15 p.m.15 views

CVE-2024-7722

Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...

4.3CVSS0.01017EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/21 4:4 p.m.16 views

CVE-2024-7725 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS7.4AI score0.03273EPSS
Exploits0References2
CVE
CVE
added 2024/08/21 4:4 p.m.53 views

CVE-2024-7725

CVE-2024-7725 is a Use-After-Free in Foxit PDF Editor/Reader AcroForm handling that can allow remote code execution after user opens a malicious file or visits a malicious page. The flaw stems from not validating the existence of an object before operations, enabling code execution in the process...

8.8CVSS8AI score0.03273EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder