Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:pdf_editor:11.0.1.49938:*:*:*:*:*:*:*

part: a version: 11.0.1.49938 update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductPdf Editor (9ffd62d3-3123-511f-93d6-d83211921c55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41780 vulnerable 2026-06-08 05:35:21.018190 Details available
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
Published: 2022-08-29T04:54:27.000Z
Updated: 2024-08-04T03:15:29.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34976 vulnerable 2026-06-08 05:32:17.241550 Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability
LOW (3.3)
Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-14659.
Published: 2024-05-07T22:54:48.308Z
Updated: 2024-08-04T00:26:55.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34975 vulnerable 2026-06-08 05:32:17.241109 Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of the transitionToState method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15218.
Published: 2024-05-07T22:54:47.464Z
Updated: 2024-08-04T00:26:55.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34974 vulnerable 2026-06-08 05:32:17.240404 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15167.
Published: 2024-05-07T22:54:46.557Z
Updated: 2024-08-04T00:26:55.722Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34973 vulnerable 2026-06-08 05:32:17.239977 Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability
LOW (3.3)
Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-14968.
Published: 2024-05-07T22:54:45.669Z
Updated: 2024-08-04T00:26:55.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34972 vulnerable 2026-06-08 05:32:17.239408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34971 vulnerable 2026-06-08 05:32:17.238956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34970 vulnerable 2026-06-08 05:32:17.238279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34969 vulnerable 2026-06-08 05:32:17.237825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34968 vulnerable 2026-06-08 05:32:17.237259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34967 vulnerable 2026-06-08 05:32:17.236858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34966 vulnerable 2026-06-08 05:32:17.236460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34965 vulnerable 2026-06-08 05:32:17.235913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34964 vulnerable 2026-06-08 05:32:17.235494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34963 vulnerable 2026-06-08 05:32:17.234840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34962 vulnerable 2026-06-08 05:32:17.234427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34961 vulnerable 2026-06-08 05:32:17.233909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34960 vulnerable 2026-06-08 05:32:17.233404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34959 vulnerable 2026-06-08 05:32:17.232874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34958 vulnerable 2026-06-08 05:32:17.232472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34957 vulnerable 2026-06-08 05:32:17.231954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34956 vulnerable 2026-06-08 05:32:17.231419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34955 vulnerable 2026-06-08 05:32:17.230770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34954 vulnerable 2026-06-08 05:32:17.230331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34953 vulnerable 2026-06-08 05:32:17.229735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34952 vulnerable 2026-06-08 05:32:17.229196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34950 vulnerable 2026-06-08 05:32:17.224653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34949 vulnerable 2026-06-08 05:32:17.223926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34948 vulnerable 2026-06-08 05:32:17.219571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.