Vulnerabilities > Foxitsoftware > High

DATE CVE VULNERABILITY TITLE RISK
2021-01-07 CVE-2018-19418 Command Injection vulnerability in Foxitsoftware PDF Activex 5.5.0
Foxit PDF ActiveX before 5.5.1 allows remote code execution via command injection because of the lack of a security permission control.
local
low complexity
foxitsoftware CWE-77
7.8
2020-12-31 CVE-2020-35931 Improper Check for Unusual or Exceptional Conditions vulnerability in Foxitsoftware Foxit Reader
An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS).
local
low complexity
foxitsoftware CWE-754
7.8
2020-12-22 CVE-2020-13547 Type Confusion vulnerability in Foxitsoftware Foxit Reader 10.0.0.37527
A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527.
network
low complexity
foxitsoftware CWE-843
8.8
2020-12-22 CVE-2020-13570 Use After Free vulnerability in Foxitsoftware Foxit Reader 10.1.0.37527
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527.
network
low complexity
foxitsoftware CWE-416
8.8
2020-12-22 CVE-2020-13560 Use After Free vulnerability in Foxitsoftware Foxit Reader 10.1.0.37527
A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527.
network
low complexity
foxitsoftware CWE-416
8.8
2020-12-22 CVE-2020-13557 Use After Free vulnerability in Foxitsoftware Foxit Reader 10.1.0.37527
A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527.
network
low complexity
foxitsoftware CWE-416
8.8
2020-11-02 CVE-2020-14425 Unspecified vulnerability in Foxitsoftware Foxit Reader 9.7.1/9.7.1.29511/9.7.2.29539
Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API.
local
low complexity
foxitsoftware
7.8
2020-10-13 CVE-2020-17417 Unspecified vulnerability in Foxitsoftware Foxit Reader
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811.
local
low complexity
foxitsoftware
7.8
2020-10-13 CVE-2020-17416 Unspecified vulnerability in Foxitsoftware Foxit Reader
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798.
local
low complexity
foxitsoftware
7.8
2020-10-13 CVE-2020-17415 Unspecified vulnerability in Foxitsoftware Foxit Reader
This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798.
local
low complexity
foxitsoftware
7.8