Vulnerabilities > Foxitsoftware > Foxit Reader

DATE CVE VULNERABILITY TITLE RISK
2020-12-31 CVE-2020-35931 Improper Check for Unusual or Exceptional Conditions vulnerability in Foxitsoftware Foxit Reader
An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS).
6.8
2020-12-22 CVE-2020-13547 Type Confusion vulnerability in Foxitsoftware Foxit Reader 10.0.0.37527
A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527.
6.8
2020-12-22 CVE-2020-13570 Use After Free vulnerability in Foxitsoftware Foxit Reader 10.1.0.37527
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527.
6.8
2020-12-22 CVE-2020-13560 Use After Free vulnerability in Foxitsoftware Foxit Reader 10.1.0.37527
A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527.
6.8
2020-12-22 CVE-2020-13557 Use After Free vulnerability in Foxitsoftware Foxit Reader 10.1.0.37527
A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527.
6.8
2020-12-15 CVE-2020-28203 NULL Pointer Dereference vulnerability in Foxitsoftware Foxit Reader
An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier.
4.3
2020-11-02 CVE-2020-14425 Unspecified vulnerability in Foxitsoftware Foxit Reader 9.7.1.29511/9.7.2.29539
Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API.
network
foxitsoftware
6.8
2020-10-13 CVE-2020-17417 Use After Free vulnerability in Foxitsoftware Foxit Reader
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811.
6.8
2020-10-13 CVE-2020-17416 Out-of-bounds Write vulnerability in Foxitsoftware Foxit Reader
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798.
6.8
2020-10-13 CVE-2020-17415 Incorrect Permission Assignment for Critical Resource vulnerability in Foxitsoftware Foxit Reader
This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798.
local
low complexity
foxitsoftware CWE-732
7.2