PH
Product
Phantompdf
549
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 26High 438Medium 36Low 0
Watch
Add Phantompdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10491 | 8.8 | May 17 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-10490 | 8.8 | May 17 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-10489 | 8.8 | May 17 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-10488 | 8.8 | May 17 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-10484 | 8.8 | May 17 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-10483 | 8.8 | May 17 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-10477 | 8.8 | May 17 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-10474 | 8.8 | May 17 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2018-10473 | 8.8 | May 17 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935 Affected: through 9.0.1.1049 |
| CVE-2017-17557 | 8.8 | Apr 24 | In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files Affected: before 9.1 |
| CVE-2018-10303 | 8.8 | Apr 23 | A use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to execute arbitrary code, aka iDefense ID V-y0nqfutlf3 Affected: before 9.1 |
| CVE-2017-8454 | 8.8 | May 3 | Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code… Affected: through 8.2.0.2192 |
| CVE-2017-8453 | 8.8 | May 3 | Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code… Affected: through 8.2.0.2192 |
| CVE-2016-8878 | 8.8 | Oct 31 | Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a… Affected: through 8.0.5 |
| CVE-2016-8877 | 8.8 | Oct 31 | Heap buffer overflow (Out-of-Bounds write) vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted… Affected: through 8.0.5 |
| CVE-2018-20316 | 8.1 | Jan 7 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read,… Affected: before 8.3.10; 9.0 before 9.5 |
| CVE-2018-20315 | 8.1 | Jan 7 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read Affected: before 8.3.10; 9.0 before 9.5 |
| CVE-2018-20314 | 8.1 | Jan 7 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow or an out-of-bounds… Affected: before 8.3.10; 9.0 before 9.5 |
| CVE-2018-20313 | 8.1 | Jan 7 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow or an out-of-bounds… Affected: before 8.3.10; 9.0 before 9.5 |
| CVE-2018-20312 | 8.1 | Jan 7 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read,… Affected: before 8.3.10; 9.0 before 9.5 |
| CVE-2018-20311 | 8.1 | Jan 7 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or an out-of-bounds… Affected: before 8.3.10; 9.0 before 9.5 |
| CVE-2018-20310 | 8.1 | Jan 7 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read Affected: before 8.3.10; 9.0 before 9.5 |
| CVE-2018-20309 | 8.1 | Jan 7 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow or an out-of-bounds… Affected: before 8.3.10; 9.0 before 9.5 |
| CVE-2020-11493 | 8.1 | Sep 4 | In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct… Affected: through 9.7.2.29539; through 10.0.0.35798 |
| CVE-2017-5556 | 8.1 | Jan 23 | The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service… Affected: 8.1.1.1115 |
| CVE-2021-38571 | 7.8 | Aug 11 | An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4 Affected: before 9.7.5.29616; 10.0.0.0 before 10.1.4 |
| CVE-2021-33792 | 7.8 | Jul 9 | Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary Affected: before 10.1.4 |
| CVE-2021-31476 | 7.8 | Jun 16 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31473 | 7.8 | May 21 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31461 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31460 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.37598 |
| CVE-2021-31459 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31458 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.37598 |
| CVE-2021-31457 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.37598 |
| CVE-2021-31456 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.37598 |
| CVE-2021-31455 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31454 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31453 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31452 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31451 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31450 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31449 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31442 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-31441 | 7.8 | May 7 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576 Affected: through 9.7.5.29616; 10.0.0.0 through 10.1.3.37598 |
| CVE-2021-27271 | 7.8 | Mar 30 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
| CVE-2021-27270 | 7.8 | Mar 30 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
| CVE-2021-27269 | 7.8 | Mar 30 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
| CVE-2021-27268 | 7.8 | Mar 30 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
| CVE-2021-27267 | 7.8 | Mar 30 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
| CVE-2021-27261 | 7.8 | Mar 30 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527 Affected: through 10.1.0.37527 |
The 500 most important CVEs for this product (exploited first, then by severity)