12611 matches found
Foxit PDF Editor 安全漏洞
Foxit PDF Editor is a PDF editor from Foxit, a Chinese company. A security vulnerability exists in Foxit PDF Editor versions prior to 13.2 and prior to 2025 2025.2, which originates from a failure to properly update the internal state after deleting a page, which may result in memory corruption o...
CVE-2025-55307
An out-of-bounds read vulnerability exists in Foxit PDF and Editor for Windows (versions before 13.2 and 2025 before 2025.2 ) due to a flaw in internal path-parsing logic. This issue can be triggered by opening a malicious PDF file containing a crafted JavaScript call to search.query() with a spe...
CVE-2025-55308
Foxit PDF and Editor for Windows is vulnerable to a use-after-free condition in versions prior to 13.2 and 2025 prior to 2025.2 . A crafted PDF containing JavaScript can invoke the closeDoc() function while internal objects are still active, causing a premature release of those objects. This vuln...
Foxit PDF Reader和Foxit PDF Editor 安全漏洞
Foxit PDF Reader and Foxit PDF Editor are both products of Foxit Corporation of China.Foxit PDF Reader is a PDF reader.Foxit PDF Editor is a PDF editor. A security vulnerability exists in Foxit PDF Reader and Foxit PDF Editor versions prior to 2025.2.1, which originates from a trigger embedded in...
CVE-2025-55310
A security vulnerability exists in Foxit PDF and Editor for Windows and macOS affecting versions prior to 13.2 and 2025 (prior to 2025.2 ). The root cause is the application's failure to perform an integrity check when loading static HTML files used by the StartPage feature. An attacker capable o...
PT-2025-50623
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups OCG are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An attacker can leverage JavaScript or PDF triggers to dynamical...
Foxit PDF Editor 安全漏洞
Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor versions prior to 13.2 and prior to 2025 2025.2, which stems from an OnBlur action that results in post-release reuse, which may result in memory corruption or application...
CVE-2025-59802
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups OCG are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An attacker can leverage JavaScript or PDF triggers to dynamical...
CVE-2025-59803: Improper Verification of Cryptographic Signature
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers. An attacker can embed triggers e.g., JavaScript in a PDF document that execute during the signing process. When a signer reviews the document, the content appears normal. However, once the signature is applied, the...
CVE-2025-55313
The Foxit PDF and Editor software for Windows and macOS (versions before 13.2 and 2025 before 2025.2 ) is vulnerable to arbitrary code execution. The root cause is the insufficient handling of memory allocation failures that occur when JavaScript assigns an extremely large value to a form field's...
EUVD-2025-202710
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can contain JavaScript that attaches an OnBlur action on a form field that destroys an annotation. During user right-click interaction, the program's internal focus change...
CVE-2025-55311
Foxit PDF and Editor for Windows and macOS is affected by a vulnerability in versions prior to 13.2 and 2025 prior to 2025.2 . A specially crafted PDF can leverage JavaScript to modify annotation content and subsequently clear the file's modification status through JavaScript interfaces. This all...
CVE-2025-55309
Foxit PDF and Editor for Windows and macOS versions prior to 13.2 and 2025 versions prior to 2025.2 are vulnerable to a use-after-free vulnerability. The issue arises when a crafted PDF uses JavaScript to attach an OnBlur action on a form field to destroy an annotation; during a user right-click ...
CVE-2025-55309
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can contain JavaScript that attaches an OnBlur action on a form field that destroys an annotation. During user right-click interaction, the program's internal focus change...
PureRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading
Job seekers looking out for opportunities might instead find their personal devices compromised, as a PureRAT campaign propagated through email leverages Foxit PDF Reader for concealment and DLL side-loading for initial entry...
ValleyRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading
Job seekers looking out for opportunities might instead find their personal devices compromised, as a ValleyRAT campaign propagated through email leverages Foxit PDF Reader for concealment and DLL side-loading for initial entry...
The vulnerability of the PDF document viewing program in Foxit PDF Reader (formerly Foxit Reader) and Foxit PhantomPDF, related to access to an uninitialized pointer, allows a malicious individual to gain access to confidential data.
The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and Foxit PhantomPDF lies in the access to an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
EUVD-2011-0358
Malware in sbrugna...