PE
Product
Pdf Editor
326
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 240Medium 53Low 30
Watch
Add Pdf Editor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-28104 | 9.8 | May 20 | Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability Affected: 11.3.1 |
| CVE-2022-24955 | 9.8 | Feb 11 | Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files Affected: through 10.1.6.37749; 11.0.1.0719 through 11.2.0.53415 |
| CVE-2022-24954 | 9.8 | Feb 11 | Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"'… Affected: through 10.1.6.37749; 11.0.1.0719 through 11.2.0.53415 |
| CVE-2026-91800 | 8.8 | Sep 23 | Foxit PDF Editor installer local privilege escalation Affected: through 13.2.6.63484; 14.0.0.68868 through 14.0.7.69441; 2023.1.0.55583 through 2023.3.0.63083; 2024.1.0.63682 through 2024.4.1.66479; 2025.1.0.66692 through 2025.3.0.69570; 2026.1.0.70169 through 2026.2.0.72029 |
| CVE-2025-13941 | 8.8 | Dec 19 | Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability Affected: through 13.2.1.23955; 14.0.0.33046 through 14.0.1.33197; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.2.1.33197 |
| CVE-2024-49576 | 8.8 | Dec 18 | A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object Affected: through 11.2.11.54113; 12.0.0 through 12.1.8.15703; 13.0.0 through 13.1.4.23147; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.3.0.26795 |
| CVE-2024-47810 | 8.8 | Dec 18 | A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object Affected: through 11.2.11.54113; 12.0.0 through 12.1.8.15703; 13.0.0 through 13.1.4.23147; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.3.0.26795 |
| CVE-2024-9254 | 8.8 | Nov 22 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 11.2.10.53951; 12.0 through 12.1.7.15526; 13.0 through 13.1.3.22478; 2023.0 through 2023.3.0.23028; 2024.0 through 2024.2.3.25184; through 11.1.9.0524; +4 more |
| CVE-2024-7725 | 8.8 | Aug 21 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: before 11.2.11.54113; 12.0.0.12394 before 12.1.8.15703; 13.0.0.21632 before 13.1.3.22478; 2023.1.0.15510 before 2024.2.3.25184 |
| CVE-2024-7724 | 8.8 | Aug 21 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: before 11.2.11.54113; 12.0.0.12394 before 12.1.8.15703; 13.0.0.21632 before 13.1.3.22478; 2023.1.0.15510 before 2024.2.3.25184 |
| CVE-2024-7723 | 8.8 | Aug 21 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: before 11.2.11.54113; 12.0.0.12394 before 12.1.8.15703; 13.0.0.21632 before 13.1.3.22478; 2023.1.0.15510 before 2024.2.3.25184 |
| CVE-2024-25938 | 8.8 | Apr 30 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget Affected: through 11.2.8.53842; 12.0.0.12394 through 12.1.4.15400; 13.0.0.21632 through 13.0.1.21693; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997; through 11.1.6.0109; +2 more |
| CVE-2024-25648 | 8.8 | Apr 30 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget Affected: through 11.2.8.53842; 12.0.0.12394 through 12.1.4.15400; 13.0.0.21632 through 13.0.1.21693; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997; through 11.1.6.0109; +4 more |
| CVE-2024-25575 | 8.8 | Apr 30 | A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object Affected: through 11.2.8.53842; 12.0.0.12394 through 12.1.4.15400; 13.0.0.21632 through 13.0.1.21693; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997; through 11.1.6.0109; +2 more |
| CVE-2022-24971 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24369 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24367 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24366 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24365 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24364 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24363 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24362 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24361 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24360 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24359 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24358 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24357 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 10.1.6.37749; 11.0.0.49893 through 11.2.0.53415 |
| CVE-2022-24356 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS Affected: before 11.1.0.0925 |
| CVE-2024-25858 | 8.4 | Mar 5 | In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters… Affected: before 2024.4 |
| CVE-2024-29072 | 8.2 | May 28 | A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138 Affected: through 11.2.9.53938; 12.0.0 through 12.1.6.15509; 13.0.0 through 13.1.1.22432; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.2.1.25153 |
| CVE-2026-91812 | 8.1 | Sep 23 | Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91790 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91791 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91792 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91793 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91795 | 7.8 | Sep 23 | Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91797 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91799 | 7.8 | Sep 23 | Foxit Editor/Reader Array resetForm Use-After-Free Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91805 | 7.8 | Sep 23 | Use-after-free Vulnerability in Foxit PDF Editor/Reader Page-tree Handling Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91801 | 7.8 | Sep 23 | Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91804 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Out-of-bounds Write Vulnerability While Rendering Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91806 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91803 | 7.8 | Sep 23 | Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91811 | 7.8 | Sep 23 | Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747; +6 more |
| CVE-2026-91813 | 7.8 | Sep 23 | Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91815 | 7.8 | Sep 23 | Foxit PDF Editor/Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91816 | 7.8 | Sep 23 | Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91789 | 7.8 | Sep 23 | Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91809 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Annotation Use-After-Free Information Disclosure Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-13126 | 7.8 | Jul 8 | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 13.2.4.24048; 14.0.0.33046 through 14.0.4.33508; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.1.1.36485 |