Vulnerabilities > Foxit > PDF Editor

DATE CVE VULNERABILITY TITLE RISK
2022-02-18 CVE-2022-24971 Out-of-bounds Read vulnerability in Foxit PDF Editor and PDF Reader
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.
network
low complexity
foxit CWE-125
8.8
2022-02-11 CVE-2022-24954 Out-of-bounds Write vulnerability in Foxit PDF Editor and PDF Reader
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings.
network
low complexity
foxit CWE-787
critical
9.8
2022-02-11 CVE-2022-24955 Uncontrolled Search Path Element vulnerability in Foxit PDF Editor and PDF Reader
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.
network
low complexity
foxit CWE-427
critical
9.8
2022-01-04 CVE-2021-45978 OS Command Injection vulnerability in Foxit PDF Editor and PDF Reader
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API.
local
low complexity
foxit CWE-78
7.8
2022-01-04 CVE-2021-45979 OS Command Injection vulnerability in Foxit PDF Editor and PDF Reader
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API.
local
low complexity
foxit CWE-78
7.8
2022-01-04 CVE-2021-45980 Unspecified vulnerability in Foxit PDF Editor and PDF Reader
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript API.
local
low complexity
foxit
7.8