Lucene search
K

84 matches found

CNNVD
CNNVD
added 2025/12/11 12:0 a.m.5 views

Foxit PDF Editor 安全漏洞

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor versions prior to 13.2 and prior to 2025 2025.2, which originates from an insufficient memory allocation when processing specially crafted PDF files, and may result in memory...

7.8CVSS7.7AI score0.00143EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-11140

Malware in sbrugna...

7.8CVSS7.7AI score0.0211EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2016-9568

Malware in sbrugna...

7.8CVSS7.6AI score0.01677EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-39967

Malicious code in bioql PyPI...

8.8CVSS8.2AI score0.0135EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:4 a.m.8 views

CVE-2018-19452

A use after free in the TextBox field Mouse Enter action in IReaderContentProvider can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19444, this has a different free...

7.8CVSS7.8AI score0.02898EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2023/09/28 12:0 a.m.81 views

Foxit PDF Editor < 11.2.7 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 11.2.7. It is, therefore affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF...

8.8CVSS7.4AI score0.01026EPSS
Exploits5References21
NVD
NVD
added 2022/11/21 4:15 p.m.19 views

CVE-2022-32774

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely deleting objects associated with pages, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS0.0098EPSS
Exploits1References1
Prion
Prion
added 2022/11/21 4:15 p.m.18 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to...

4.4CVSS7.7AI score0.0135EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2022/02/04 11:15 p.m.17 views

CVE-2022-22150

A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception which is improperly handled, leaving the engine in an invalid state, which can lead to memory corruption and arbitrary...

8.8CVSS0.01795EPSS
Exploits1References1
CNVD
CNVD
added 2022/01/12 12:0 a.m.27 views

Adobe Acrobat and Reader Resource Management Error Vulnerability

Adobe Acrobat, a PDF file editing and conversion tool from Adobe, is vulnerable to a resource management error in Adobe Acrobat and Reader, which is caused by a post-release usage error when processing PDF files. A remote attacker could exploit the vulnerability to create a specially crafted PDF...

9.3CVSS3.2AI score0.10801EPSS
Exploits0References1
NVD
NVD
added 2021/08/05 9:15 p.m.20 views

CVE-2021-21870

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a...

8.8CVSS0.019EPSS
Exploits1References1
Prion
Prion
added 2021/08/05 9:15 p.m.25 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a...

6.8CVSS8.8AI score0.019EPSS
Exploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/07/30 12:0 a.m.81 views

Foxit Reader < 11.0.1 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 11.0.1. It is, therefore affected by multiple arbitrary code execution vulnerabilities due to a use-after-free flaw in the JavaScript engine. An authenticated, local attacker can exploit this b...

9.1CVSS7.8AI score0.89479EPSS
Exploits3References28
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.5 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An information disclosure vulnerability exists in Mozilla Firefox. The vulnerability stems from the fact that if a user clicks on a specially crafted PDF, it may obfuscate the leak of cross-domain...

8.8CVSS7.3AI score0.01109EPSS
Exploits0References21
Prion
Prion
added 2020/12/22 6:15 p.m.20 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicio...

6.8CVSS8.9AI score0.02221EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2020/01/16 10:15 p.m.14 views

Design/Logic Flaw

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick t...

6.8CVSS8.8AI score0.02422EPSS
Exploits1References1Affected Software2
AlpineLinux
AlpineLinux
added 2020/01/16 9:59 p.m.21 views

CVE-2019-5126

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

8.8CVSS7.3AI score0.03485EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2018/12/17 12:0 a.m.59 views

Adobe Reader DC JavaScript AnnotsString Object Arbitrary Overwrite Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AnnotsString...

7.7CVSS2.9AI score0.04374EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/12/17 12:0 a.m.26 views

Adobe Reader DC JavaScript CBSharedReviewCompleteAutomation JavaScript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass JavaScript API restrictions on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

2.7CVSS2.5AI score0.04374EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/12/12 12:0 a.m.26 views

Adobe Acrobat Pro DC search Javascript Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass Javascript API restrictions on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.2CVSS2.2AI score0.06415EPSS
Exploits0References1
Rows per page
Query Builder