Skip to content
Noroxi

foxitsoftware records

798 published records for vendor foxitsoftware. 0 of them have been exploited in the wild (listed in CISA KEV) and 3 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 0.4%
Pre-auth RCE
356
With a fix record
0.1%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

798 records
  • CVE-2021-34833
    60This week

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

    HighCVSS 7.8No exploitEPSS 95%

    foxit · pdf readerAug 4, 2021

  • CVE-2018-9948
    60This week

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935.

    MediumCVSS 6.5WeaponizedEPSS 62%

    foxitsoftware · foxit readerMay 17, 2018

  • CVE-2018-9958
    60This week

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049.

    HighCVSS 8.8WeaponizedEPSS 61%

    foxitsoftware · foxit readerMay 17, 2018

  • CVE-2020-13557
    56Plan

    A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527.

    HighCVSS 8.8No exploitEPSS 70%

    foxitsoftware · foxit readerDec 22, 2020

  • CVE-2020-13548
    55Plan

    In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code

    HighCVSS 8.8No exploitEPSS 65%

    foxitsoftware · foxit readerFeb 10, 2021

  • CVE-2009-0836
    53Plan

    Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing

    CriticalCVSS 10.0WeaponizedEPSS 42%

    foxitsoftware · readerMar 10, 2009

  • CVE-2021-34847
    49Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

    HighCVSS 7.8No exploitEPSS 61%

    foxit · pdf readerAug 4, 2021

  • CVE-2018-20247
    47Plan

    In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree

    HighCVSS 7.8No exploitEPSS 54%

    foxitsoftware · quick pdf libraryDec 24, 2018

  • CVE-2018-3924
    44Plan

    An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096.

    HighCVSS 7.8No exploitEPSS 43%

    foxitsoftware · foxit readerAug 1, 2018

  • CVE-2008-1104
    44Plan

    Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a craf

    CriticalCVSS 9.3No exploitEPSS 22%

    foxitsoftware · foxit readerMay 21, 2008

  • CVE-2008-0151
    43Plan

    Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause a denial of service (

    CriticalCVSS 10.0Proof of conceptEPSS 8%

    foxitsoftware · wac serverJan 8, 2008

  • CVE-2018-3956
    42Plan

    An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader vers

    HighCVSS 7.1No exploitEPSS 46%

    foxitsoftware · phantompdfJan 30, 2019

  • CVE-2021-34850
    42Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893.

    HighCVSS 7.8No exploitEPSS 38%

    foxit · pdf readerAug 4, 2021

  • CVE-2008-7031
    42Plan

    Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of servic

    CriticalCVSS 10.0Proof of conceptEPSS 8%

    foxitsoftware · wac serverAug 24, 2009

  • CVE-2008-7225
    42Plan

    Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of servic

    CriticalCVSS 10.0No exploitEPSS 5%

    foxitsoftware · wac serverSep 14, 2009

  • CVE-2018-3843
    41Plan

    An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotati

    HighCVSS 8.8No exploitEPSS 21%

    foxitsoftware · foxit readerApr 19, 2018

  • CVE-2020-14425
    40Plan

    Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API.

    HighCVSS 7.8Proof of conceptEPSS 31%

    foxitsoftware · foxit readerNov 2, 2020

  • CVE-2018-14442
    40Plan

    Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs.

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    foxitsoftware · foxit readerJul 20, 2018

  • CVE-2018-17607
    40Plan

    Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) becaus

    CriticalCVSS 9.8No exploitEPSS 3%

    foxitsoftware · phantompdfSep 28, 2018

  • CVE-2018-17609
    40Plan

    Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) becaus

    CriticalCVSS 9.8No exploitEPSS 3%

    foxitsoftware · phantompdfSep 28, 2018

  • CVE-2018-17610
    40Plan

    Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) becaus

    CriticalCVSS 9.8No exploitEPSS 3%

    foxitsoftware · phantompdfSep 28, 2018

  • CVE-2018-17608
    40Plan

    Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) becaus

    CriticalCVSS 9.8No exploitEPSS 3%

    foxitsoftware · phantompdfSep 28, 2018

  • CVE-2018-17611
    40Plan

    Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) becaus

    CriticalCVSS 9.8No exploitEPSS 3%

    foxitsoftware · phantompdfSep 28, 2018

  • CVE-2020-26534
    40Plan

    An issue was discovered in Foxit Reader and PhantomPDF before 10.1.

    CriticalCVSS 9.8No exploitEPSS 2%

    foxitsoftware · foxit readerOct 2, 2020

  • CVE-2018-21242
    40Plan

    An issue was discovered in Foxit PhantomPDF before 8.3.6.

    CriticalCVSS 9.8No exploitEPSS 2%

    foxitsoftware · phantompdfJun 4, 2020