Lucene search
K

5 matches found

OSV
OSV
added 2025/12/11 4:16 p.m.1 views

CVE-2025-59802

Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups OCG are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An attacker can leverage JavaScript or PDF triggers to dynamical...

7.5CVSS5.8AI score0.0004EPSS
Exploits0References1
CVE
CVE
added 2025/12/11 12:0 a.m.10 views

CVE-2025-59802

Summary: CVE-2025-59802 affects Foxit PDF Editor/Reader prior to 2025.2.1. The issue is signature spoofing via Optional Content Groups (OCG): the OCG state is runtime-only and not included in the signature buffer, allowing an attacker to dynamically flip OCG visibility after signing (Post-Sign) u...

7.5CVSS6.2AI score0.0004EPSS
Exploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/09/30 12:0 a.m.3 views

Foxit PDF Reader for Mac < 2025.2.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader for Mac application previously named Foxit Reader for Mac installed on the remote macOS host is prior to 2025.2.1. It is, therefore affected by multiple vulnerabilities: - Addressed potential issues where the application could deliver incorrect...

7.5CVSS5.6AI score0.0004EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/30 12:0 a.m.4 views

Foxit PDF Editor for Mac < 13.2.1 / 14.0.1 / 2025.2.1 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 2025.2.1/14.0.1/13.2.1. It is, therefore affected by multiple vulnerabilities: - Addressed potential issues where the application could deliv...

7.5CVSS5.6AI score0.0004EPSS
Exploits0References3
VulnCheck KEV
VulnCheck KEV
added 2024/12/05 12:0 a.m.1 views

VulnCheck KEV: CVE-2024-52269

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04...

8.2CVSS5.8AI score0.00193EPSS
Exploits0References1
Rows per page
Query Builder