PR
Product
PDF Reader
369
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 281Medium 54Low 30
Watch
Add PDF Reader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55308 | 6.7 | Dec 11 | An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2 Affected: through 2025.1.0.27937 |
| CVE-2025-55309 | 6.7 | Dec 11 | An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2 Affected: through 2025.1.0.66692; through 2025.1.0.27937 |
| CVE-2026-57259 | 6.5 | Jul 8 | Foxit PDF Editor/Reader XDP XFA XXE arbitrary local file read Affected: through 2026.1.1.36485 |
| CVE-2025-55311 | 6.5 | Dec 11 | An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2 Affected: through 2025.1.0.66692; through 2025.1.0.27937 |
| CVE-2022-47881 | 6.5 | Jan 18 | Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability Affected: through 11.2.1.53537 |
| CVE-2022-24370 | 6.5 | Feb 18 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS Affected: before 11.1.0.0925 |
| CVE-2022-24368 | 6.5 | Feb 18 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.1.0.52543 Affected: through 11.1.0.52543 |
| CVE-2026-91796 | 6.1 | Sep 23 | Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-91807 | 6.1 | Sep 23 | Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 2026.2.0.39747; through 2026.2.1.39815 |
| CVE-2026-91808 | 6.1 | Sep 23 | Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-91810 | 6.1 | Sep 23 | Foxit PDF Editor/Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-91817 | 6.1 | Sep 23 | Foxit PDF Editor/Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-57241 | 6.1 | Jul 8 | Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability Affected: through 2026.1.1.36485 |
| CVE-2026-57243 | 6.1 | Jul 8 | Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability Affected: through 2026.1.1.36485 |
| CVE-2026-57253 | 6.1 | Jul 8 | Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 2026.1.1.36485 |
| CVE-2026-57255 | 6.1 | Jul 8 | Security vulnerability in Foxit PDF Editor/Reader — OOB Read via NaN-Bypass Clamp Affected: through 2026.1.1.36485 |
| CVE-2026-57257 | 6.1 | Jul 8 | Security vulnerability in Foxit PDF Editor/Reader — PRC 3D BRep Renderer Heap OOB Read Affected: through 2026.1.1.36485; through 2026.1.1.70276 |
| CVE-2026-57258 | 6.1 | Jul 8 | Foxit PDF Editor/Reader Crash via Malformed PRC 3D Stream Affected: through 2026.1.1.36485; through 2026.1.1.70276 |
| CVE-2022-28681 | 6.1 | Jul 18 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537 Affected: through 11.2.1.53537 |
| CVE-2026-91802 | 5.5 | Sep 23 | Foxit PDF Editor/Reader — Heap Buffer Overflow in WebP Image Decoding via Bitmap Stride Confusion Affected: through 2026.2.0.39747 |
| CVE-2026-91818 | 5.5 | Sep 23 | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 2026.2.0.39747 |
| CVE-2026-18622 | 5.5 | Aug 13 | Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid Affected: through 2026.1.2.36540; through 2026.1.2.70304 |
| CVE-2026-5937 | 5.5 | Apr 27 | Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability Affected: before 2026.1.1 |
| CVE-2026-5938 | 5.5 | Apr 27 | Foxit PDF Editor/Reader Infinite Loop Denial-of-Service Vulnerability Affected: before 2026.1.1 |
| CVE-2026-5940 | 5.5 | Apr 27 | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability Affected: before 2026.1.1 |
| CVE-2026-5942 | 5.5 | Apr 27 | Foxit PDF Editor/Reader AcroForm Signature Use-After-Free Vulnerability Affected: before 2026.1.1 |
| CVE-2026-5939 | 5.5 | Apr 27 | UAF in Foxit PDF Editor/Reader via XFA calculate event Affected: before 2026.1.1 |
| CVE-2026-3776 | 5.5 | Apr 1 | Null pointer dereference in Foxit PDF Editor/Reader when accessing stamp annotation Affected: through 2025.3.0.35737; through 2025.3.0.69570 |
| CVE-2026-3778 | 5.5 | Apr 1 | Stack exhaustion caused by cyclic references in Foxit PDF Editor/Reader Affected: through 2025.3.0.35737; through 2025.3.0.69570 |
| CVE-2025-9323 | 5.5 | Sep 2 | Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: 2025.1.0.27937 |
| CVE-2025-9324 | 5.5 | Sep 2 | Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: 2024.4.0.27683 |
| CVE-2025-9325 | 5.5 | Sep 2 | Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: 2024.4.0.27683 |
| CVE-2025-9327 | 5.5 | Sep 2 | Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: 2024.4.0.27683 |
| CVE-2021-34976 | 5.5 | May 7 | Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability Affected: through 11.0.1.49938 |
| CVE-2021-34973 | 5.5 | May 7 | Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability Affected: through 11.0.1.49938 |
| CVE-2021-34972 | 5.5 | May 7 | Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability Affected: through 11.0.1.49938 |
| CVE-2021-34970 | 5.5 | May 7 | Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability Affected: through 11.0.1.49938 |
| CVE-2021-34969 | 5.5 | May 7 | Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability Affected: through 11.0.1.49938 |
| CVE-2021-34949 | 5.5 | May 7 | Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 11.0.1.49938 |
| CVE-2023-51561 | 5.5 | May 3 | Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 2023.2.0.21408 |
| CVE-2024-30363 | 5.5 | Apr 2 | Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 2023.3.0.63083; through 2023.3.0.23028 |
| CVE-2020-35990 | 5.5 | Aug 11 | Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, allows local attackers to cause a denial… Affected: through 10.1.0.37527 |
| CVE-2022-43640 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430 Affected: before 12.0.2 |
| CVE-2022-37386 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575 Affected: before 12.0.1 |
| CVE-2022-37383 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537 Affected: before 12.0.1 |
| CVE-2022-37382 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537 Affected: before 12.0.1 |
| CVE-2022-37380 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537 Affected: before 12.0.1 |
| CVE-2022-37379 | 5.5 | Mar 29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537 Affected: before 12.0.1 |
| CVE-2022-25641 | 5.5 | Aug 29 | Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed… Affected: 11.0 before 11.2.2 |
| CVE-2021-40326 | 5.5 | Aug 29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents Affected: 11.0 before 11.1 |