CVE-2020-8844

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2020-8853

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-8857

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2020-8848

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2024-25938

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2024-25648

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. A...

CVE-2024-25575

A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2024-47810

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

CVE-2024-29072

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege...

CVE-2024-49576

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBFWidget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

CVE-2024-28888

A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in its memory usage after decompression. This allows a hacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader relates to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created JavaScript script...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) lies in the incorrect handling of links before accessing the file. This allows attackers to exploit this flaw to gain increased privileges.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the AcroForms component of the PDF e-mail viewing software, Foxit PDF Reader (formerly Foxit Reader), allows a hacker to execute arbitrary code.

The vulnerability of the AcroForms component in the PDF document viewing software Foxit PDF Reader formerly Foxit Reader is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Foxit PDF Reader elevation of privilege vulnerability (CNVD-2025-01708)

Foxit PDF Reader is a PDF document reader. A security vulnerability exists in the Foxit PDF Reader installer, which can be exploited by a local attacker to construct a special request that can execute arbitrary code with SYSTEM privileges...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2025-00954)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader suffers from a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, resulting in a memory corruption condition that can be exploited by a remote attacker to execute code in the...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2025-00955)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A buffer overflow vulnerability exists in Foxit PDF Reader version 2024.2.3.25184, which stems from a lack of proper validation of user-supplied data, resulting in the reading of data beyond the end of the allocated buffer, and can be...

The vulnerability of the AcroForm component in the PDF Foxit Reader software (formerly Foxit Reader) allows a perpetrator to execute arbitrary code.

The vulnerability of the AcroForm component in the PDF viewer software from Foxit, known as Foxit PDF Reader formerly Foxit Reader, relates to reading data beyond the allowed range in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the user...

Vulnerabilities fixed in Foxit PDF Reader and PDF Editor

Foxit has fixed vulnerabilities in Foxit PDF Reader. The vulnerabilities include a remote code execution vulnerability due to improper validation of user-supplied data in AcroForms, a memory corruption related to AcroForm functionality, and a local privilege escalation vulnerability that can be...

CVE-2024-12752

Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...