CVE-2025-69624: NULL Pointer Dereference

Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert. When app.alert is called with more than one argument and the first argument evaluates to null for example, app.alertapp.activeDocs, true when app.activeDocs is...

CVE-2021-27517: Improper Neutralization of Input During Web Page Generation

Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert in the Acrobat JavaScript API...

PT-2021-17490

Name of the Vulnerable Software and Affected Versions Foxit PDF SDK For Web versions prior to 7.5.1 is not specified, however, Foxit PDF SDK For Web through 7.5.0 is mentioned as vulnerable. Foxit PDF SDK For Web versions through 7.5.0 Description The issue allows for arbitrary JavaScript code...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-10945: Use After Free

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2017-11624

Name of the Vulnerable Software and Affected Versions Foxit Reader version 8.3.0.14878 Description This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...