Lucene search
+L

28613 matches found

Vulnrichment
Vulnrichment
added 2026/04/27 11:0 a.m.6 views

CVE-2026-5942 Foxit PDF Editor/Reader AcroForm Signature Use-After-Free Vulnerability

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program...

5.5CVSS5.2AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/27 11:0 a.m.40 views

CVE-2026-5943 Foxit PDF Editor/Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability

Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document modifications, object reference validity was not properly maintained, leading to a crash when accessing an invalid pointer during page information...

7.8CVSS0.00181EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/27 11:0 a.m.50 views

CVE-2026-5943

Foxit PDF Editor/Reader AcroForm Annotation Use-After-Free vulnerability (CVE-2026-5943) is described as a remote code execution flaw caused by document structural anomalies that cause invalid pointer access when querying page information after scripts modify the document. The affected component ...

7.8CVSS5.2AI score0.00181EPSS
SaveExploits0References1Affected Software2
EUVD
EUVD
added 2026/04/27 11:0 a.m.27 views

EUVD-2026-25825

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution...

5.5CVSS5.8AI score0.00113EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/27 11:0 a.m.9 views

CVE-2026-5939 UAF in Foxit PDF Editor/Reader via XFA calculate event

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution...

5.5CVSS5.8AI score0.00113EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/27 11:0 a.m.10 views

CVE-2026-5941 Foxit PDF Editor/Reader AcroForm Signature Remote Code Execution Vulnerability

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction...

7.8CVSS5.2AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/27 11:0 a.m.43 views

CVE-2026-5941

CVE-2026-5941 affects Foxit PDF Editor/Reader, specifically the AcroForm Signature processing. The issue is a parsing logic flaw where non-signature data can be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes...

7.8CVSS5.2AI score0.00169EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.14 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have a resource management vulnerability. This vulnerability arises from the special XFA PDF...

5.5CVSS6.1AI score0.00113EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.17 views

Foxit PDF Reader < 2026.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.1. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element relationships and...

7.8CVSS6.9AI score0.00182EPSS
SaveExploits0References8
Packet Storm
Packet Storm
added 2026/04/27 12:0 a.m.128 views

📄 pdf-image 2.0.0 Command Injection

In pdf-image version 2.0.0, a security issue allows OS command injection when untrusted input is passed to the PDFImage constructor and later processed by methods such as getInfo...

9.8CVSS5.4AI score0.02493EPSS
SaveExploits4
Zero Day Initiative
Zero Day Initiative
added 2026/04/27 12:0 a.m.16 views

Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS4.1AI score0.00182EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.14 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have a resource management vulnerability. This vulnerability arises from calling a function th...

7.8CVSS7.1AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.16 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. There is a resource management vulnerability in Foxit PDF Editor and Foxit PDF Reader. This vulnerability arises from abnormal document...

7.8CVSS7.1AI score0.00181EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/27 12:0 a.m.21 views

Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6AI score0.00169EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/04/27 12:0 a.m.15 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.16 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. There is a resource management vulnerability in Foxit PDF Editor and Foxit PDF Reader. This vulnerability stems from a page lifecycle...

5.5CVSS5.8AI score0.00182EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/04/27 12:0 a.m.7 views

Allocation of Resources Without Limits or Throttling

Overview org.springframework.ai:spring-ai-pdf-document-reader is a Spring AI PDF document reader Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via ForkPDFLayoutTextStripper. An attacker can cause denial of service by supplying a crafted P...

7.1CVSS5.5AI score0.0024EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/27 12:0 a.m.10 views

Foxit PDF Editor < 14.0.4 / 2026.1.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2026.1.1/14.0.4. It is, therefore affected by multiple vulnerabilities: - Document structural anomalies caused inconsistencies between page element...

7.8CVSS6.9AI score0.00182EPSS
SaveExploits0References8
GithubExploit
GithubExploit
added 2026/04/26 6:9 p.m.138 views

Advanced-AI-Recon-and-Exploit-Framework

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner...

6.1AI score
SaveExploits0
Cvelist
Cvelist
added 2026/04/26 1:19 p.m.40 views

CVE-2018-25279 jiNa OCR Image to Text 1.0 Denial of Service via PNG

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert...

6.9CVSS0.00123EPSS
SaveExploits0References3
Rows per page
Query Builder