Foxit Software PDF Editor 12.0.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:pdf_editor:12.0.0:*:*:*:*:*:*:*

part: a version: 12.0.0 update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductPdf Editor (9ffd62d3-3123-511f-93d6-d83211921c55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32488 vulnerable 2026-06-08 06:35:33.213622 Details available
In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there.
Published: 2024-04-15T00:00:00.000Z
Updated: 2024-08-09T15:38:30.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30371 vulnerable 2026-06-08 06:35:29.659019 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23355.
Published: 2024-04-02T20:28:59.183Z
Updated: 2024-08-02T01:32:07.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30367 vulnerable 2026-06-08 06:35:29.568145 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23013.
Published: 2024-04-02T20:27:37.842Z
Updated: 2024-08-02T01:32:07.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30365 vulnerable 2026-06-08 06:35:29.566475 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22947.
Published: 2024-04-02T20:18:43.270Z
Updated: 2024-08-02T01:32:07.171Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30362 vulnerable 2026-06-08 06:35:29.564571 Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22798.
Published: 2024-04-02T20:18:04.752Z
Updated: 2024-08-02T01:32:07.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30361 vulnerable 2026-06-08 06:35:29.563476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30360 vulnerable 2026-06-08 06:35:29.562579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30359 vulnerable 2026-06-08 06:35:29.561728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30358 vulnerable 2026-06-08 06:35:29.560756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30357 vulnerable 2026-06-08 06:35:29.559870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30354 vulnerable 2026-06-08 06:35:29.557816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30353 vulnerable 2026-06-08 06:35:29.556932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30352 vulnerable 2026-06-08 06:35:29.556114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30351 vulnerable 2026-06-08 06:35:29.555071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30349 vulnerable 2026-06-08 06:35:29.553358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30348 vulnerable 2026-06-08 06:35:29.552332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30346 vulnerable 2026-06-08 06:35:29.550653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30345 vulnerable 2026-06-08 06:35:29.549420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30344 vulnerable 2026-06-08 06:35:29.548625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30337 vulnerable 2026-06-08 06:35:29.543905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30336 vulnerable 2026-06-08 06:35:29.542981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30335 vulnerable 2026-06-08 06:35:29.542105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30331 vulnerable 2026-06-08 06:35:29.534967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30323 vulnerable 2026-06-08 06:35:29.524528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38116 vulnerable 2026-06-08 06:08:16.909338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38111 vulnerable 2026-06-08 06:08:16.903936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.