CVE-2023-38115

Summary: CVE-2023-38115 affects Foxit PDF Reader/Editor related to AcroForm handling. The root cause is improper validation of user-supplied data in Doc Objects, causing an out-of-bounds read that may disclose memory content. The vulnerability is described as enabling information disclosure, with...

CVE-2023-38114

CVE-2023-38114 is a Foxit PDF Reader/Editor vulnerability described as an AcroForm Doc Object Use-After-Free leading to remote code execution. The flaw stems from not validating the existence of a Doc object before performing operations, allowing an attacker to run code in the user’s context afte...

CVE-2023-38113

CVE-2023-38113 affects Foxit PDF Reader/Editor (Annotation handling).根The flaw is Use-After-Free in Annotation objects due to missing validation of object existence, enabling information disclosure and potential arbitrary code execution when paired with other vulnerabilities. Exploitation require...

CVE-2023-38112

CVE-2023-38112 affects Foxit PDF Reader (XFA Annotation) with a use-after-free in the handling of Annotation objects. The flaw arises from not validating the existence of an object before performing operations, enabling an attacker to execute arbitrary code in the current process. Impact is high ...

CVE-2023-38111

CVE-2023-38111 affects Foxit PDF Reader/Editor where the fault lies in how annotation objects are handled. The vulnerability is a use-after-free caused by not validating the existence of an object before performing operations on it, enabling code execution in the context of the current process. I...

CVE-2023-38110 Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-38110 Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

Foxit PDF Reader AcroForm Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-38107 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2023-38089 Kofax Power PDF clearInterval Out-Of-Bounds Write Remote Code Execution Vulnerability

Kofax Power PDF clearInterval Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-27366 Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2023-27366

CVE-2023-27366 affects Foxit PDF Reader. It is a Doc object handling Use-After-Free vulnerability that allows an attacker to execute code in the context of the current process. Exploitation requires user interaction (target visits a malicious page or opens a malicious file). The vulnerability is ...

CVE-2023-27329

CVE-2023-27329 affects Foxit PDF Reader. The vulnerability is a Use-After-Free in Annotation handling caused by not validating object existence before operations, enabling arbitrary code execution in the process context. Exploitation requires user interaction (target visits a malicious page or op...

Softing Secure Integration Server 安全漏洞

Softing Secure Integration Server is a secure integration server from Softing Germany. It provides a powerful OPC UA data integration layer and supports interface abstraction, aggregation, data preprocessing, and security supervision. A security vulnerability exists in Softing Secure Integration...

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A security vulnerability exists in Foxit PDF Reader, which originates from a remote code execution vulnerability in the reuse of Doc objects after release...

DEBIAN-CVE-2024-27062

In the Linux kernel, the following vulnerability has been resolved: nouveau: lock the client object tree. It appears the client object tree has no locking unless I've missed something else. Fix races around adding/removing client objects, mostly vram bar mappings. 4562.099306 general protection...

CVE-2024-27062 nouveau: lock the client object tree.

In the Linux kernel, the following vulnerability has been resolved: nouveau: lock the client object tree. It appears the client object tree has no locking unless I've missed something else. Fix races around adding/removing client objects, mostly vram bar mappings. 4562.099306 general protection...

CVE-2024-26957

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo cards on KVM guests with debug kernel build revealed an use after free for the load field of the struct zcryptcard. The reason was an...

sssd: Race condition during authorization leads to GPO policies functioning inconsistently

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately...

kernel: PCI/DOE: Fix destroy_work_on_stack() race

A race condition flaw was found in the Linux kernel's PCI Data Object Exchange DOE implementation. The destroyworkonstack function is called after signaling completion, creating a race where the work struct can go out of scope before being destroyed. This triggers debug object warnings when...

Foxit PDF Editor for Mac < 13.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 13.1. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability...