PE
Product
Pdf Editor
326
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 240Medium 53Low 30
Watch
Add Pdf Editor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-91796 | 6.1 | Sep 23 | Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91807 | 6.1 | Sep 23 | Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747; +6 more |
| CVE-2026-91808 | 6.1 | Sep 23 | Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91810 | 6.1 | Sep 23 | Foxit PDF Editor/Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91817 | 6.1 | Sep 23 | Foxit PDF Editor/Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-57241 | 6.1 | Jul 8 | Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability Affected: through 13.2.4.24048; 14.0.0.33046 through 14.0.4.33508; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.1.1.36485 |
| CVE-2026-57243 | 6.1 | Jul 8 | Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability Affected: through 13.2.4.24048; 14.0.0.33046 through 14.0.4.33508; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.1.1.36485 |
| CVE-2026-57253 | 6.1 | Jul 8 | Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 13.2.4.24048; 14.0.0.33046 through 14.0.4.33508; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.1.1.36485 |
| CVE-2026-57255 | 6.1 | Jul 8 | Security vulnerability in Foxit PDF Editor/Reader — OOB Read via NaN-Bypass Clamp Affected: through 13.2.4.24048; 14.0.0.33046 through 14.0.4.33508; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.1.1.36485 |
| CVE-2026-57257 | 6.1 | Jul 8 | Security vulnerability in Foxit PDF Editor/Reader — PRC 3D BRep Renderer Heap OOB Read Affected: through 13.2.4.24048; 14.0.0.33046 through 14.0.4.33508; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.1.1.36485; +6 more |
| CVE-2026-57258 | 6.1 | Jul 8 | Foxit PDF Editor/Reader Crash via Malformed PRC 3D Stream Affected: through 13.2.4.24048; 14.0.0.33046 through 14.0.4.33508; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.1.1.36485; +6 more |
| CVE-2022-28681 | 6.1 | Jul 18 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537 Affected: through 10.1.7.37777; 11.0 through 11.2.1.53537 |
| CVE-2026-91802 | 5.5 | Sep 23 | Foxit PDF Editor/Reader — Heap Buffer Overflow in WebP Image Decoding via Bitmap Stride Confusion Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-91818 | 5.5 | Sep 23 | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 13.2.5.63482; 14.0.0.33046 through 14.0.7.33751; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.2.0.39747 |
| CVE-2026-18622 | 5.5 | Aug 13 | Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid Affected: through 13.2.5.24109; 14.0.0.33046 through 14.0.5.33580; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; 2026.1.0.36452 through 2026.1.2.36540; +6 more |
| CVE-2026-5937 | 5.5 | Apr 27 | Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability Affected: before 13.2.4; 14.0.0 before 14.0.4; 2023.0.0 before 2026.1.1 |
| CVE-2026-5938 | 5.5 | Apr 27 | Foxit PDF Editor/Reader Infinite Loop Denial-of-Service Vulnerability Affected: before 13.2.4; 14.0.0 before 14.0.4; 2023.0.0 before 2026.1.1 |
| CVE-2026-5940 | 5.5 | Apr 27 | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: before 13.2.4; 14.0.0 before 14.0.4; 2023.0.0 before 2026.1.1 |
| CVE-2026-5942 | 5.5 | Apr 27 | Foxit PDF Editor/Reader AcroForm Signature Use-After-Free Vulnerability Affected: before 13.2.4; 14.0.0 before 14.0.4; 2023.0.0 before 2026.1.1 |
| CVE-2026-5939 | 5.5 | Apr 27 | UAF in Foxit PDF Editor/Reader via XFA calculate event Affected: 14.0.0 before 14.0.4; 2023.0.0 before 2026.1.1 |
| CVE-2026-3776 | 5.5 | Apr 1 | Null pointer dereference in Foxit PDF Editor/Reader when accessing stamp annotation Affected: through 13.2.2.24014; 14.0.0.33046 through 14.0.2.33402; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; through 13.2.2.63349; +4 more |
| CVE-2026-3778 | 5.5 | Apr 1 | Stack exhaustion caused by cyclic references in Foxit PDF Editor/Reader Affected: through 13.2.2.24014; 14.0.0.33046 through 14.0.2.33402; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 through 2025.3.0.35737; through 13.2.2.63349; +4 more |
| CVE-2025-9323 | 5.5 | Sep 2 | Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 13.1.7.23637; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 |
| CVE-2025-9324 | 5.5 | Sep 2 | Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 13.1.7.23637; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937; through 13.1.7.63027; 2023.1.0.55583 through 2023.3.0.63083; +2 more |
| CVE-2025-9325 | 5.5 | Sep 2 | Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 13.1.7.23637; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937; through 13.1.7.63027; 2023.1.0.55583 through 2023.3.0.63083; +2 more |
| CVE-2025-9327 | 5.5 | Sep 2 | Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 13.1.7.23637; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 |
| CVE-2021-34976 | 5.5 | May 7 | Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability Affected: through 10.1.5.37672; 11.0.0.49893; 11.0.1.49938 |
| CVE-2021-34973 | 5.5 | May 7 | Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability Affected: through 10.1.5.37672; 11.0.0.49893; 11.0.1.49938 |
| CVE-2021-34972 | 5.5 | May 7 | Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability Affected: through 10.1.5.37672; 11.0.0.49893; 11.0.1.49938 |
| CVE-2021-34970 | 5.5 | May 7 | Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability Affected: through 10.1.5.37672; 11.0.0.49893; 11.0.1.49938 |
| CVE-2021-34969 | 5.5 | May 7 | Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability Affected: through 10.1.5.37672; 11.0.0.49893; 11.0.1.49938 |
| CVE-2021-34949 | 5.5 | May 7 | Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 10.1.5.37672; 11.0.0.49893; 11.0.1.49938 |
| CVE-2023-51561 | 5.5 | May 3 | Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 10.1.12.37872; 11.0.0 through 11.2.7.53812; 12.0.0 through 12.1.3.15356; 13.0.0.21632; 2023.1.0.15510; 2023.2.0.21408 |
| CVE-2024-30363 | 5.5 | Apr 2 | Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 11.1.6.0109; 12.0.0.0601 through 12.1.2.55366; 13.0.0.61829 through 13.0.1.61866; 2023.1.0.55583 through 2023.3.0.63083; through 10.1.12.37872; 11.0.0.49893 through 11.2.8.53842; +3 more |
| CVE-2022-43640 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430 Affected: before 10.1.10; 11.0.0 before 11.2.4; 12.0.0.12394 before 12.0.2 |
| CVE-2022-37386 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575 Affected: before 10.1.9; 11.0.0 before 11.2.3; 12.0.0.12394 |
| CVE-2022-37383 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537 Affected: before 10.1.9; 11.0.0 before 11.2.3; 12.0.0.12394 |
| CVE-2022-37382 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537 Affected: before 10.1.9; 11.0.0 before 11.2.3; 12.0.0.12394 |
| CVE-2022-37380 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537 Affected: before 10.1.9; 11.0.0 before 11.2.3; 12.0.0.12394 |
| CVE-2022-37379 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537 Affected: before 10.1.9; 11.0.0 before 11.2.3; 12.0.0.12394 |
| CVE-2022-25641 | 5.5 | Aug 29 | Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed… Affected: 11.0 before 11.2.2 |
| CVE-2021-40326 | 5.5 | Aug 29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents Affected: 11.0 before 11.1 |
| CVE-2022-27359 | 5.5 | May 5 | Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference Affected: before 12.0.1 |
| CVE-2022-25108 | 5.5 | Mar 10 | Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without proper validation Affected: before 10.1.7; 11.0 before 11.2.1 |
| CVE-2025-59803 | 5.3 | Dec 11 | Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers Affected: through 13.2.0.63256; 2023.1.0.55583 through 2023.3.0.63083; 2024.1.0.63682 through 2024.4.1.66479; 14.0.0.68868; 2025.1.0.66692; 2025.2.0.68868; +6 more |
| CVE-2024-7722 | 4.3 | Aug 21 | Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability Affected: before 11.2.11.54113; 12.0.0.12394 before 12.1.8.15703; 13.0.0.21632 before 13.1.3.22478; 2023.1.0.15510 before 2024.2.3.25184 |
| CVE-2025-55307 | 3.3 | Dec 11 | An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2 Affected: through 13.1.7.23637; 2023.1.0.15510 through 2023.3.0.23028; 2024.1.0.23997 through 2024.4.1.27687; 2025.1.0.27937 |
| CVE-2021-34951 | 3.3 | May 7 | Foxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability Affected: through 10.1.5.37672; 11.0.0.0510 through 11.0.0.49893; 11.0.1.0719 through 11.0.1.49938 |
| CVE-2023-51562 | 3.3 | May 3 | Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 10.1.12.37872; 11.0.0 through 11.2.7.53812; 12.0.0 through 12.1.3.15356; 13.0.0.21632; 2023.1.0.15510; 2023.2.0.21408; +2 more |
| CVE-2023-51559 | 3.3 | May 3 | Foxit PDF Reader Doc Out-Of-Bounds Read Remote Code Execution Vulnerability Affected: through 10.1.12.37872; 11.0.0 through 11.2.7.53812; 12.0.0 through 12.1.3.15356; 13.0.0.21632; 2023.1.0.15510; 2023.2.0.21408; +5 more |