Lucene search
+L

116 matches found

GithubExploit
GithubExploit
•added 2026/09/11 4:44 p.m.•31 views

Exploit for Out-of-bounds Read in Foxit Pdf_Editor

CVE-2024-30350 Research Notes Overview CVE-2024-30350 is...

3.3CVSS6.1AI score0.00511EPSS
SaveExploits1
Zero Day Initiative
Zero Day Initiative
•added 2026/09/10 12:00 a.m.•14 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.6AI score0.00376EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2026/08/24 12:00 a.m.•8 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.2AI score0.0017EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/10 12:39 p.m.•53 views

CVE-2026-52750 Ghidra < 12.1- Command Injection via URL Annotation Click

Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. Attackers can execute arbitrary commands under the Ghidra user's privileges by embedding malicious URLs in program comments that victims click...

8.4CVSS0.00741EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/10 12:39 p.m.•17 views

CVE-2026-52750 Ghidra < 12.1- Command Injection via URL Annotation Click

Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. Attackers can execute arbitrary commands under the Ghidra user's privileges by embedding malicious URLs in program comments that victims click...

7.3CVSS6.2AI score
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2026/06/09 12:00 a.m.•31 views

Adobe Acrobat Pro DC Annots.api Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS5.8AI score0.00376EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/19 7:16 a.m.•13 views

CVE-2025-66495

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially...

7.8CVSS6.1AI score0.00305EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/19 7:16 a.m.•12 views

CVE-2025-66495

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially...

7.8CVSS0.00305EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/19 7:09 a.m.•7 views

CVE-2025-66495 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially...

7.8CVSS7.2AI score0.00305EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/19 7:09 a.m.•31 views

CVE-2025-66495

CVE-2025-66495 is a confirmed use-after-free vulnerability in Foxit PDF Reader/Editor related to annotation handling. Affected products include Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and macOS. The issue arises when opening a PDF containing specially crafted JavaScript, w...

7.8CVSS7.2AI score0.00305EPSS
SaveExploits0References1Affected Software2
EUVD
EUVD
•added 2025/12/19 7:09 a.m.•13 views

EUVD-2025-204465

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially...

7.8CVSS7.1AI score0.00305EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/19 12:00 a.m.•13 views

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A security vulnerability exists in Foxit PDF Reader versions prior to 2025.2.1, prior to 14.0.1, and prior to 13.2.1, which stems from a post-release reuse in the handling of annotations and could lead to the execution of arbitrary...

7.8CVSS6.5AI score0.00305EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•2 views

CVE-2025-66497: Out-of-bounds Read

A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When opening a PDF file containing malformed or specially crafted PRC content, out-of-bounds memory access may occur, resulting in memory corruptio...

7.8CVSS6.1AI score0.00209EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/19 12:00 a.m.•15 views

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS7.2AI score0.00305EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/12 1:06 a.m.•10 views

CVE-2025-55314

An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. When pages in a PDF are deleted via JavaScript, the application may fail to properly update internal states. Subsequent annotation management operations assume these states are valid, causing...

7.8CVSS7.4AI score0.00202EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/12/10 12:00 a.m.•13 views

The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 lies in the handling of annotations within memory. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 is related to reading data beyond the buffer in memory during the processing of annotation objects. Exploiting this vulnerability can allow an attacker ...

7.8CVSS7.6AI score0.00499EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2021-21604

Malware in sbrugna...

7.8CVSS7.5AI score0.00349EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2018-6237

Malware in sbrugna...

8.8CVSS8.8AI score0.02773EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-21612

Malware in sbrugna...

7.8CVSS7.5AI score0.00349EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-41937

Malicious code in bioql PyPI...

7.8CVSS7.5AI score0.00538EPSS
SaveExploits0References2
Rows per page
Query Builder