Approved changes feed: RSS · Atom

cpe:2.3:a:foxitsoftware:pdf_editor:11.0.0.49893:*:*:*:*:*:*:*

part: a version: 11.0.0.49893 update: *

VendorFoxitsoftware (432505a3-624b-5d0c-b6e3-841531927527)
ProductPdf Editor (36513717-47ab-5b39-b61c-84cdb1b9cb8f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/foxitsoftware/foxit-editor purl2cpe 2026-06-01 10:14:39.209694

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34853 vulnerable 2026-06-08 05:32:17.048690 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-14013.
Published: 2021-08-04T15:16:48.000Z
Updated: 2024-08-04T00:26:54.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34852 vulnerable 2026-06-08 05:32:17.048313 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13929.
Published: 2021-08-04T15:16:46.000Z
Updated: 2024-08-04T00:26:54.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34851 vulnerable 2026-06-08 05:32:17.047914 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-14016.
Published: 2021-08-04T15:16:45.000Z
Updated: 2024-08-04T00:26:54.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34850 vulnerable 2026-06-08 05:32:17.047421 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-14529.
Published: 2021-08-04T15:16:43.000Z
Updated: 2024-08-04T00:26:54.602Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34849 vulnerable 2026-06-08 05:32:17.047050 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-14531.
Published: 2021-08-04T15:16:42.000Z
Updated: 2024-08-04T00:26:54.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34848 vulnerable 2026-06-08 05:32:17.046671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34847 vulnerable 2026-06-08 05:32:17.046276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34846 vulnerable 2026-06-08 05:32:17.045795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34845 vulnerable 2026-06-08 05:32:17.045299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34844 vulnerable 2026-06-08 05:32:17.044918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34843 vulnerable 2026-06-08 05:32:17.044563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34842 vulnerable 2026-06-08 05:32:17.044185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34841 vulnerable 2026-06-08 05:32:17.043782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34840 vulnerable 2026-06-08 05:32:17.043311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34839 vulnerable 2026-06-08 05:32:17.042942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34838 vulnerable 2026-06-08 05:32:17.042554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34837 vulnerable 2026-06-08 05:32:17.042184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34836 vulnerable 2026-06-08 05:32:17.041806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34835 vulnerable 2026-06-08 05:32:17.041427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34834 vulnerable 2026-06-08 05:32:17.040910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34833 vulnerable 2026-06-08 05:32:17.040521 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34832 vulnerable 2026-06-08 05:32:17.040096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34831 vulnerable 2026-06-08 05:32:17.039458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.