Vulnerabilities > Foxit > Phantompdf

DATE CVE VULNERABILITY TITLE RISK
2022-08-29 CVE-2021-40326 Improper Verification of Cryptographic Signature vulnerability in Foxit PDF Editor, PDF Reader and Phantompdf
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents.
local
low complexity
foxit CWE-347
5.5
2022-08-29 CVE-2021-41780 Use After Free vulnerability in Foxit PDF Editor, PDF Reader and Phantompdf
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
local
low complexity
foxit CWE-416
7.8
2022-08-29 CVE-2021-41781 Use After Free vulnerability in Foxit PDF Editor, PDF Reader and Phantompdf
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
local
low complexity
foxit CWE-416
7.8
2022-08-29 CVE-2021-41782 Use After Free vulnerability in Foxit PDF Editor, PDF Reader and Phantompdf
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
local
low complexity
foxit CWE-416
7.8
2022-08-29 CVE-2021-41783 Use After Free vulnerability in Foxit PDF Editor, PDF Reader and Phantompdf
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
local
low complexity
foxit CWE-416
7.8
2022-08-29 CVE-2021-41784 Use After Free vulnerability in Foxit PDF Editor, PDF Reader and Phantompdf
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
local
low complexity
foxit CWE-416
7.8
2022-08-29 CVE-2021-41785 Use After Free vulnerability in Foxit PDF Editor, PDF Reader and Phantompdf
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
local
low complexity
foxit CWE-416
7.8
2022-08-29 CVE-2022-25641 Unspecified vulnerability in Foxit PDF Editor, PDF Reader and Phantompdf
Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents.
local
low complexity
foxit
5.5
2021-07-20 CVE-2021-27517 Cross-site Scripting vulnerability in Foxit Phantompdf and Reader
Foxit PDF SDK For Web through 7.5.0 allows XSS.
network
low complexity
foxit CWE-79
6.1