Lucene search
+L

10398 matches found

Talos Blog
Talos Blog
added 2024/05/29 4:07 p.m.56 views

Out-of-bounds reads in Adobe Acrobat; Foxit PDF Reader contains vulnerability that could lead to SYSTEM-level privileges

Cisco Talos Vulnerability Research team has helped to disclose and patch more than 20 vulnerabilities over the past three weeks, including two in the popular Adobe Acrobat Reader software. Acrobat, one of the most popular PDF readers currently available, contains two out-of-bounds read...

9.8CVSS9.8AI score0.01986EPSS
SaveExploits16
CNVD
CNVD
added 2024/05/29 12:00 a.m.53 views

Foxit Reader Trust Management Issue Vulnerability

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A trust management issue vulnerability exists in Foxit Reader version 2024.2.0.25138, which stems from an elevation of privilege vulnerability. No details of the vulnerability are available at this time...

8.2CVSS6.6AI score0.00464EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/28 2:15 p.m.5 views

CVE-2024-29072

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege...

8.2CVSS5.8AI score0.00464EPSS
SaveExploits1References2
NVD
NVD
added 2024/05/28 2:15 p.m.27 views

CVE-2024-29072

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege...

8.2CVSS8.3AI score0.00464EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/05/28 1:52 p.m.19 views

CVE-2024-29072

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege...

8.2CVSS7AI score0.00464EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/05/28 1:52 p.m.40 views

CVE-2024-29072

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege...

8.2CVSS8.2AI score0.00464EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/28 12:00 a.m.6 views

PT-2024-22698 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 2024.2.0.25138 Description: A privilege escalation issue exists due to improper certification validation of the updater executable before executing it. This allows a low privilege user to trigger the update action,...

8.2CVSS7.5AI score0.00464EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/05/28 12:00 a.m.33 views

Foxit Reader 信任管理问题漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A trust management issue vulnerability exists in Foxit Reader version 2024.2.0.25138, which stems from an elevation of privilege vulnerability. No details of the vulnerability are available at this time...

8.2CVSS6.8AI score0.00464EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2024/05/26 12:00 a.m.57 views

Foxit PDF Editor < 12.1.7 Vulnerability

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 12.1.7. It is, therefore affected by vulnerability: - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability...

8.2CVSS5.3AI score0.00464EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/05/26 12:00 a.m.39 views

Foxit PDF Editor < 11.2.10 Vulnerability

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 11.2.10. It is, therefore affected by vulnerability: - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability...

8.2CVSS5.3AI score0.00464EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/05/25 12:00 a.m.42 views

Foxit PDF Editor < 13.1.2 Vulnerability

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 13.1.2. It is, therefore affected by vulnerability: - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability...

8.2CVSS5.3AI score0.00464EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/05/24 12:00 a.m.32 views

Foxit PDF Reader < 2024.2.2 Vulnerability

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2024.2.2. It is, therefore affected by vulnerability: - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occur...

8.2CVSS5.8AI score0.00464EPSS
SaveExploits1References2
Kaspersky
Kaspersky
added 2024/05/24 12:00 a.m.48 views

KLA68205 PE vulnerability in Foxit Reader

Privilege escalation vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to gain privileges. Original advisories Foxit Security Bulletins Related products Foxit-Reader CVE list CVE-2024-29072 critical Solution Update to the latest version Download Foxit Reader...

8.2CVSS8.6AI score0.00464EPSS
SaveExploits1References3
The Hacker News
The Hacker News
added 2024/05/20 12:20 p.m.47 views

Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal

Multiple threat actors are weaponizing a design flaw in Foxit PDF Reader to deliver a variety of malware such as Agent Tesla, AsyncRAT, DCRat, NanoCore RAT, NjRAT, Pony, Remcos RAT, and XWorm. "This exploit triggers security warnings that could deceive unsuspecting users into executing harmful...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:00 a.m.10 views

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) is related to data type mixing errors, allowing attackers to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader is related to data type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF document from a remote location...

10CVSS7.7AI score0.17716EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:00 a.m.13 views

The vulnerability of the ComboBox control in the PDF viewer application for electronic documents by Foxit PDF Reader (formerly Foxit Reader) allows a hacker to execute arbitrary code.

The vulnerability of the ComboBox control in the PDF document viewing application of the Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

10CVSS7.6AI score0.15639EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:00 a.m.15 views

The vulnerability of the ComboBox control in the PDF viewer application for electronic documents by Foxit PDF Reader (formerly Foxit Reader) allows a hacker to execute arbitrary code.

The vulnerability of the ComboBox control in the PDF document viewing application of the Foxit PDF Reader formerly Foxit Reader is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

10CVSS7.6AI score0.15639EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/19 12:00 a.m.6 views

PT-2024-6697 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability, where the...

7.8CVSS8AI score0.0043EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/05/19 12:00 a.m.5 views

PT-2024-6698 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: The issue is related to an out-of-bounds read in the annotation handler of Foxit PDF Reader, which can allow an attacker to disclose sensitive information by opening a specially...

7.1CVSS7.5AI score0.00488EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/05/15 12:00 a.m.7 views

PT-2024-7014 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. The flaw exists within the handling of...

7.8CVSS7.9AI score0.0027EPSS
SaveExploits0References8
Rows per page
Query Builder