Vulnerabilities > Foxitsoftware > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-08-11 CVE-2021-38563 Improper Validation of Array Index vulnerability in multiple products
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.
network
low complexity
foxitsoftware foxit CWE-129
critical
9.8
2021-08-11 CVE-2021-38564 Out-of-bounds Read vulnerability in Foxitsoftware PDF Editor and PDF Reader
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1.
network
low complexity
foxitsoftware CWE-125
critical
9.1
2021-08-11 CVE-2021-38568 Out-of-bounds Write vulnerability in Foxitsoftware Foxit Reader
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
network
low complexity
foxitsoftware CWE-787
critical
9.8
2021-08-11 CVE-2021-38570 Link Following vulnerability in Foxitsoftware Foxit Reader
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
network
low complexity
foxitsoftware CWE-59
critical
9.1
2021-08-11 CVE-2021-38572 Unspecified vulnerability in Foxitsoftware Foxit Reader
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
network
low complexity
foxitsoftware
critical
9.8
2021-08-11 CVE-2021-38573 Unspecified vulnerability in Foxitsoftware Foxit Reader
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
network
low complexity
foxitsoftware
critical
9.8
2021-08-11 CVE-2021-38574 SQL Injection vulnerability in Foxitsoftware Foxit Reader
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.
network
low complexity
foxitsoftware CWE-89
critical
9.8
2021-08-11 CVE-2021-33793 Out-of-bounds Write vulnerability in Foxitsoftware Foxit Reader
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion.
network
low complexity
foxitsoftware CWE-787
critical
9.8
2021-08-11 CVE-2021-33794 Unspecified vulnerability in Foxitsoftware Foxit Reader
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction.
network
low complexity
foxitsoftware
critical
9.1
2020-10-02 CVE-2020-26539 Use After Free vulnerability in Foxitsoftware Foxit Reader
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.
network
low complexity
foxitsoftware CWE-416
critical
9.8