Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Foxit

Foxit Foxit Reader vulnerabilities

247 published CVEs name Foxit Foxit Reader among the affected products.

Published CVEs
247
Last 12 months
0
Critical
1
Known exploited
0

Critical 1High 197Medium 49Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 201752
  2. 2018171
  3. 20224
  4. 202311
  5. 20247
  6. 20252

Newest CVEs

  • CVE-2025-32451

    A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside…

    Foxit · Foxit Reader

    High8.8
  • CVE-2013-10068

    Foxit Reader <= 5.4.5.0114 Plugin URL Processing Buffer Overflow

    Foxit · Foxit Reader

    Critical9.4
  • CVE-2024-49576

    A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript code inside a…

    Foxit · Foxit Reader

    High8.8
  • CVE-2024-47810

    A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious…

    Foxit · Foxit Reader

    High8.8
  • CVE-2024-28888

    A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a checkbox field object. A specially crafted Javascript code inside a…

    Foxit · Foxit Reader

    High8.8
  • CVE-2024-29072

    A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the…

    Foxit · Foxit Reader

    High8.2
  • CVE-2024-25938

    A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a malicious…

    Foxit · Foxit Reader

    High8.8
  • CVE-2024-25648

    A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a malicious…

    Foxit · Foxit Reader

    High8.8
  • CVE-2024-25575

    A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a…

    Foxit · Foxit Reader

    High8.8
  • CVE-2023-39542

    A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files,…

    Foxit · Foxit Reader

    High8.8