FR
Product
Foxit Reader
372
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 264Medium 69Low 11
Watch
Add Foxit Reader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10302 | 7.8 | Apr 23 | A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-jyb51g3mv9 Affected: before 9.1 |
| CVE-2016-6169 | 7.8 | Feb 7 | Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (memory corruption and application… Affected: through 7.3.4.311 |
| CVE-2016-6168 | 7.8 | Feb 7 | Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to cause a denial of service (application crash) and execute… Affected: through 7.3.4.311 |
| CVE-2017-14694 | 7.8 | Sep 22 | Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a… Affected: 8.3.2.25013 |
| CVE-2017-8455 | 7.8 | May 3 | Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code… Affected: through 8.2.0.2051 |
| CVE-2016-3740 | 7.8 | Apr 4 | Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large… Affected: 7.3.4.311 |
| CVE-2016-4065 | 7.8 | Apr 22 | The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds… Affected: through 7.3.0.118 |
| CVE-2016-4064 | 7.8 | Apr 22 | Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a… Affected: through 7.3.0.118 |
| CVE-2016-4063 | 7.8 | Apr 22 | Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number of -1 in… Affected: through 7.3.0.118 |
| CVE-2016-4059 | 7.8 | Apr 22 | Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a crafted FlateDecode stream in a PDF… Affected: through 7.3.0.118 |
| CVE-2021-38569 | 7.5 | Aug 11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4 Affected: before 10.1.4 |
| CVE-2020-26540 | 7.5 | Oct 2 | An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS Affected: before 4.1 |
| CVE-2019-13124 | 7.5 | Sep 30 | Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8… Affected: through 9.6.0.25114 |
| CVE-2019-13123 | 7.5 | Sep 30 | Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8… Affected: through 9.6.0.25114 |
| CVE-2016-4061 | 7.5 | Apr 22 | Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream Affected: through 7.3.0.118 |
| CVE-2016-4060 | 7.5 | Apr 22 | Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a denial of service (application crash) via unspecified… Affected: through 7.3.0.118 |
| CVE-2015-8843 | 7.4 | Apr 13 | The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local… Affected: 6.1; 6.1.2; 6.1.4; 6.2; 6.2.1; 7.0; +4 more |
| CVE-2017-10994 | 7.3 | Jul 7 | Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document Affected: through 8.3.0.14878 |
| CVE-2019-5007 | 7.1 | Jan 3 | An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows Affected: before 9.4 |
| CVE-2018-19348 | 7.1 | Nov 17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or… Affected: 9.3.0.10826 |
| CVE-2018-19347 | 7.1 | Nov 17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or… Affected: 9.3.0.10826 |
| CVE-2018-19346 | 7.1 | Nov 17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or… Affected: 9.3.0.10826 |
| CVE-2018-19345 | 7.1 | Nov 17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or… Affected: 9.3.0.10826 |
| CVE-2018-19344 | 7.1 | Nov 17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or… Affected: 9.3.0.10826 |
| CVE-2018-19343 | 7.1 | Nov 17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read),… Affected: 9.3.0.10826 |
| CVE-2018-19342 | 7.1 | Nov 17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or… Affected: 9.3.0.10826 |
| CVE-2018-19341 | 7.1 | Nov 17 | The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or… Affected: 9.3.0.10826 |
| CVE-2018-11620 | 6.5 | Jul 31 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-11621 | 6.5 | Jul 31 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.1.0.5096 |
| CVE-2018-14289 | 6.5 | Jul 31 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096 Affected: through 9.1.0.5096 |
| CVE-2018-14316 | 6.5 | Jul 31 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096 Affected: through 9.1.0.5096 |
| CVE-2018-9984 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-9983 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: 9.0.0.29935 |
| CVE-2018-9980 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-9979 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-9978 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-9976 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-9973 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.0.1.1049 |
| CVE-2018-9972 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.0.1.1049 |
| CVE-2018-9971 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.104 Affected: 9.0.1.104 |
| CVE-2018-9963 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.0.1.1049 |
| CVE-2018-9950 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-9948 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-9946 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-1179 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-1175 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-1174 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-10493 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049 Affected: through 9.0.1.1049 |
| CVE-2018-10492 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-10487 | 6.5 | May 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |