Skip to content
Noroxi

Foxit records

359 published records for vendor foxit.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 0.3%
Pre-auth RCE
40
With a fix record
0.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

359 records
  • CVE-2009-0837
    63This week

    Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary cod

    CriticalCVSS 10.0WeaponizedEPSS 76%

    foxit · reader3.0Mar 10, 2009

  • CVE-2021-34833
    60This week

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

    HighCVSS 7.8No exploitEPSS 96%

    foxit · pdf readerAug 4, 2021

  • CVE-2021-34847
    49Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

    HighCVSS 7.8No exploitEPSS 62%

    foxit · pdf readerAug 4, 2021

  • CVE-2023-27363
    45Plan

    Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 47%

    foxit · pdf editorMay 2, 2024

  • CVE-2022-24954
    43Plan

    Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpa

    CriticalCVSS 9.8No exploitEPSS 12%

    foxit · pdf readerFeb 10, 2022

  • CVE-2021-34850
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

    HighCVSS 7.8No exploitEPSS 38%

    foxit · pdf readerAug 4, 2021

  • CVE-2024-25575
    40Plan

    A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object.

    HighCVSS 8.8No exploitEPSS 18%

    foxit · pdf editorApr 30, 2024

  • CVE-2024-25648
    40Plan

    A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget.

    HighCVSS 8.8No exploitEPSS 16%

    foxit · pdf editorApr 30, 2024

  • CVE-2024-25938
    40Plan

    A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget.

    HighCVSS 8.8No exploitEPSS 16%

    foxit · pdf editorApr 30, 2024

  • CVE-2022-28104
    40Plan

    Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability.

    CriticalCVSS 9.8No exploitEPSS 2%

    foxit · pdf editorMay 20, 2022

  • CVE-2021-38563
    39Monitor

    An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.

    CriticalCVSS 9.8No exploitEPSS 1%

    foxit · pdf readerAug 11, 2021

  • CVE-2022-24955
    39Monitor

    Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.

    CriticalCVSS 9.8No exploitEPSS 1%

    foxit · pdf readerFeb 10, 2022

  • CVE-2026-5936
    39Monitor

    Server-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API

    CriticalCVSS 9.8No exploitEPSS 0%

    foxit · pdf services apiApr 13, 2026

  • CVE-2021-21831
    37Monitor

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598.

    HighCVSS 8.8No exploitEPSS 6%

    foxit · pdf readerAug 5, 2021

  • CVE-2021-40420
    36Monitor

    A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.

    HighCVSS 8.8No exploitEPSS 5%

    foxit · pdf readerFeb 4, 2022

  • CVE-2017-14458
    36Monitor

    An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 8.3.2.25013.

    HighCVSS 8.8No exploitEPSS 3%

    foxit · pdf readerApr 23, 2018

  • CVE-2018-3850
    36Monitor

    An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049.

    HighCVSS 8.8No exploitEPSS 3%

    foxit · pdf readerApr 23, 2018

  • CVE-2022-24971
    36Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.

    HighCVSS 8.8No exploitEPSS 3%

    foxit · pdf editorFeb 18, 2022

  • CVE-2022-24364
    36Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.

    HighCVSS 8.8No exploitEPSS 3%

    foxit · pdf editorFeb 18, 2022

  • CVE-2022-24365
    36Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.

    HighCVSS 8.8No exploitEPSS 3%

    foxit · pdf editorFeb 18, 2022

  • CVE-2022-24363
    36Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.

    HighCVSS 8.8No exploitEPSS 3%

    foxit · pdf editorFeb 18, 2022

  • CVE-2022-24366
    36Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.

    HighCVSS 8.8No exploitEPSS 3%

    foxit · pdf editorFeb 18, 2022

  • CVE-2022-24369
    36Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.

    HighCVSS 8.8No exploitEPSS 3%

    foxit · pdf editorFeb 18, 2022

  • CVE-2022-24359
    36Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.

    HighCVSS 8.8No exploitEPSS 3%

    foxit · pdf editorFeb 18, 2022

  • CVE-2022-24360
    36Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.

    HighCVSS 8.8No exploitEPSS 3%

    foxit · pdf editorFeb 18, 2022