Vulnerabilities > Foxit > PDF Reader > High

DATE CVE VULNERABILITY TITLE RISK
2022-02-18 CVE-2022-24366 Use After Free vulnerability in Foxit PDF Editor and PDF Reader
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.
network
low complexity
foxit CWE-416
8.8
2022-02-18 CVE-2022-24367 Use After Free vulnerability in Foxit PDF Editor and PDF Reader
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.
network
low complexity
foxit CWE-416
8.8
2022-02-18 CVE-2022-24369 Out-of-bounds Write vulnerability in Foxit PDF Editor and PDF Reader
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.
network
low complexity
foxit CWE-787
8.8
2022-02-18 CVE-2022-24971 Out-of-bounds Read vulnerability in Foxit PDF Editor and PDF Reader
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.
network
low complexity
foxit CWE-125
8.8
2022-02-04 CVE-2021-40420 Use After Free vulnerability in Foxit PDF Reader 11.1.0.52543
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.
network
low complexity
foxit CWE-416
8.8
2022-02-04 CVE-2022-22150 Improper Handling of Exceptional Conditions vulnerability in Foxit PDF Reader 11.1.0.52543
A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.
network
low complexity
foxit CWE-755
8.8
2022-01-04 CVE-2021-45978 OS Command Injection vulnerability in Foxit PDF Editor and PDF Reader
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API.
local
low complexity
foxit CWE-78
7.8
2022-01-04 CVE-2021-45979 OS Command Injection vulnerability in Foxit PDF Editor and PDF Reader
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API.
local
low complexity
foxit CWE-78
7.8
2022-01-04 CVE-2021-45980 Unspecified vulnerability in Foxit PDF Editor and PDF Reader
Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript API.
local
low complexity
foxit
7.8
2021-08-11 CVE-2021-38567 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS.
network
low complexity
foxitsoftware foxit CWE-476
7.5