Foxit Software PDF Editor 12.0.0.12394

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:pdf_editor:12.0.0.12394:*:*:*:*:*:*:*

part: a version: 12.0.0.12394 update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductPdf Editor (9ffd62d3-3123-511f-93d6-d83211921c55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-37391 vulnerable 2026-06-08 05:47:12.731047 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17661.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T19:37:50.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37390 vulnerable 2026-06-08 05:47:12.730648 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17551.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T19:43:28.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37389 vulnerable 2026-06-08 05:47:12.730052 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17545.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T19:44:24.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37388 vulnerable 2026-06-08 05:47:12.729478 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17516.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T19:55:04.950Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37387 vulnerable 2026-06-08 05:47:12.728904 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17552.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-14T20:32:41.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37386 vulnerable 2026-06-08 05:47:12.728335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37385 vulnerable 2026-06-08 05:47:12.727724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37384 vulnerable 2026-06-08 05:47:12.727182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37383 vulnerable 2026-06-08 05:47:12.726454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37382 vulnerable 2026-06-08 05:47:12.725805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37381 vulnerable 2026-06-08 05:47:12.725207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37380 vulnerable 2026-06-08 05:47:12.724574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37379 vulnerable 2026-06-08 05:47:12.724069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37378 vulnerable 2026-06-08 05:47:12.723356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37377 vulnerable 2026-06-08 05:47:12.722517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37376 vulnerable 2026-06-08 05:47:12.721189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.