PR
Product
PDF Reader
369
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 281Medium 54Low 30
Watch
Add PDF Reader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-24955 | 9.8 | Feb 11 | Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files Affected: through 11.1.0.52543 |
| CVE-2022-24954 | 9.8 | Feb 11 | Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"'… Affected: through 11.1.0.52543 |
| CVE-2021-38563 | 9.8 | Aug 11 | An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1 Affected: through 11.0.0.0510 |
| CVE-2026-91800 | 8.8 | Sep 23 | Foxit PDF Editor installer local privilege escalation Affected: through 2026.2.0.72029 |
| CVE-2025-13941 | 8.8 | Dec 19 | Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability Affected: through 2025.2.1.33197 |
| CVE-2025-32451 | 8.8 | Aug 13 | A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer Affected: 2025.1.0.27937 |
| CVE-2024-49576 | 8.8 | Dec 18 | A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object Affected: through 2024.3.0.26795 |
| CVE-2024-47810 | 8.8 | Dec 18 | A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object Affected: through 2024.3.0.26795 |
| CVE-2024-9254 | 8.8 | Nov 22 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 2024.2.3.25184; through 2024.2.2.64388 |
| CVE-2024-28888 | 8.8 | Oct 2 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object Affected: 2024.1.0.23997 |
| CVE-2024-7725 | 8.8 | Aug 21 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: before 2024.2.3.25184 |
| CVE-2024-7724 | 8.8 | Aug 21 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: before 2024.2.3.25184 |
| CVE-2024-7723 | 8.8 | Aug 21 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: before 2024.2.3.25184 |
| CVE-2024-25938 | 8.8 | Apr 30 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget Affected: 2024.1.0.23997 |
| CVE-2024-25648 | 8.8 | Apr 30 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget Affected: 2024.1.0.23997; 2024.1.0.63682 |
| CVE-2024-25575 | 8.8 | Apr 30 | A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object Affected: 2024.1.0.23997 |
| CVE-2023-33876 | 8.8 | Jul 19 | A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations Affected: 12.1.2.15332 |
| CVE-2023-33866 | 8.8 | Jul 19 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332 Affected: 12.1.2.15332 |
| CVE-2023-28744 | 8.8 | Jul 19 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289 Affected: 12.1.1.15289 |
| CVE-2023-27379 | 8.8 | Jul 19 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332 Affected: 12.1.2.15332 |
| CVE-2022-24971 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24369 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24367 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24366 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24365 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24364 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24363 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24362 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24361 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24360 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24359 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24358 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24357 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2022-24356 | 8.8 | Feb 18 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS Affected: before 11.1.0.0925 |
| CVE-2022-22150 | 8.8 | Feb 4 | A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543 Affected: 11.1.0.52543 |
| CVE-2021-40420 | 8.8 | Feb 4 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543 Affected: 11.1.0.52543 |
| CVE-2021-21893 | 8.8 | Aug 5 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.0.0.49893 Affected: 11.0.0.49893 |
| CVE-2021-21870 | 8.8 | Aug 5 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651 Affected: 10.1.4.37651 |
| CVE-2021-21831 | 8.8 | Aug 5 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598 Affected: 10.1.3.37598 |
| CVE-2018-3850 | 8.8 | Apr 23 | An exploitable use-after-free vulnerability exists in the JavaScript engine Foxit Software Foxit PDF Reader version 9.0.1.1049 Affected: 9.0.1.1049 |
| CVE-2017-14458 | 8.8 | Apr 23 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 8.3.2.25013 Affected: 8.3.2.25013 |
| CVE-2024-25858 | 8.4 | Mar 5 | In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters… Affected: before 2024.4 |
| CVE-2024-29072 | 8.2 | May 28 | A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138 Affected: through 2024.2.1.25153 |
| CVE-2026-91812 | 8.1 | Sep 23 | Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-91790 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-91791 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-91792 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-91793 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-91795 | 7.8 | Sep 23 | Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-91797 | 7.8 | Sep 23 | Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability Affected: through 2026.2.0.39747 |