Foxit Pdf Reader

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:foxit_software:foxit_pdf_reader:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFoxit Software (ebefaa06-c604-5f5e-8b0c-f7b32ee8ed7e)
ProductFoxit Pdf Reader (3438e338-d675-5317-bd98-db7ca37c5e14)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-3997 vulnerable 2026-06-08 05:11:41.559240 Details available
HIGH (8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-08T16:00:00.000Z
Updated: 2024-09-16T18:55:21.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3996 vulnerable 2026-06-08 05:11:41.558651 Details available
HIGH (8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-08T16:00:00.000Z
Updated: 2024-09-17T03:47:40.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3995 vulnerable 2026-06-08 05:11:41.558246 Details available
HIGH (8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-03T15:00:00.000Z
Updated: 2024-09-16T17:44:13.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3994 vulnerable 2026-06-08 05:11:41.557672 Details available
HIGH (8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-03T15:00:00.000Z
Updated: 2024-09-16T23:50:41.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3993 vulnerable 2026-06-08 05:11:41.557081 Details available
HIGH (8)
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
Published: 2018-10-03T15:00:00.000Z
Updated: 2024-09-17T03:33:39.245Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3992 vulnerable 2026-06-08 05:11:41.556515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3967 vulnerable 2026-06-08 05:11:41.493824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3966 vulnerable 2026-06-08 05:11:41.493464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3965 vulnerable 2026-06-08 05:11:41.492973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3964 vulnerable 2026-06-08 05:11:41.492466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3946 vulnerable 2026-06-08 05:11:41.464654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3945 vulnerable 2026-06-08 05:11:41.464202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3942 vulnerable 2026-06-08 05:11:41.460840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3941 vulnerable 2026-06-08 05:11:41.460322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3940 vulnerable 2026-06-08 05:11:41.458856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-10030 vulnerable 2026-06-08 04:56:40.606868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-20010 vulnerable 2026-06-08 04:54:11.191863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.