Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:phantompdf:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductPhantompdf (a3f2e0be-f111-5098-bd14-b869de0dddbe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-27365 vulnerable 2026-06-08 05:57:40.985127 Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DOC files. The issue results from the lack of proper restrictions on macro-enabled documents. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-19739.
Published: 2024-05-03T01:56:15.953Z
Updated: 2024-09-18T18:28:06.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27363 vulnerable 2026-06-08 05:57:40.981497 Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exportXFAData method. The application exposes a JavaScript interface that allows writing arbitrary files. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-19697.
Published: 2024-05-03T01:56:14.432Z
Updated: 2024-08-02T12:09:43.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25641 vulnerable 2026-06-08 05:41:46.200551 Details available
Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents. This leads to delivery of incorrect signature information via an Incremental Saving Attack and a Shadow Attack.
Published: 2022-08-29T04:53:44.000Z
Updated: 2024-08-03T04:42:50.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41785 vulnerable 2026-06-08 05:35:21.021263 Details available
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
Published: 2022-08-29T04:53:56.000Z
Updated: 2024-08-04T03:15:29.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41784 vulnerable 2026-06-08 05:35:21.020828 Details available
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
Published: 2022-08-29T04:54:05.000Z
Updated: 2024-08-04T03:15:29.337Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41783 vulnerable 2026-06-08 05:35:21.020487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41782 vulnerable 2026-06-08 05:35:21.020146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41781 vulnerable 2026-06-08 05:35:21.019709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41780 vulnerable 2026-06-08 05:35:21.019002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40326 vulnerable 2026-06-08 05:35:17.400811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34975 vulnerable 2026-06-08 05:32:17.241035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34971 vulnerable 2026-06-08 05:32:17.238882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34964 vulnerable 2026-06-08 05:32:17.235436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34961 vulnerable 2026-06-08 05:32:17.233852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34960 vulnerable 2026-06-08 05:32:17.233348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34958 vulnerable 2026-06-08 05:32:17.232416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34957 vulnerable 2026-06-08 05:32:17.231893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34956 vulnerable 2026-06-08 05:32:17.231357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34955 vulnerable 2026-06-08 05:32:17.230697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34951 vulnerable 2026-06-08 05:32:17.226973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31476 vulnerable 2026-06-08 05:31:53.533527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27517 vulnerable 2026-06-08 05:31:21.737676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27271 vulnerable 2026-06-08 05:31:20.938584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27270 vulnerable 2026-06-08 05:31:20.938068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27269 vulnerable 2026-06-08 05:31:20.937590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27268 vulnerable 2026-06-08 05:31:20.937086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27267 vulnerable 2026-06-08 05:31:20.936608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27266 vulnerable 2026-06-08 05:31:20.936114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27265 vulnerable 2026-06-08 05:31:20.935694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27264 vulnerable 2026-06-08 05:31:20.934983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27263 vulnerable 2026-06-08 05:31:20.934482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27262 vulnerable 2026-06-08 05:31:20.933766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27261 vulnerable 2026-06-08 05:31:20.922764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8856 vulnerable 2026-06-08 05:27:19.835834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8855 vulnerable 2026-06-08 05:27:19.835430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8854 vulnerable 2026-06-08 05:27:19.834811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8853 vulnerable 2026-06-08 05:27:19.834403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8846 vulnerable 2026-06-08 05:27:19.830577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8845 vulnerable 2026-06-08 05:27:19.829771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17415 vulnerable 2026-06-08 05:20:56.439964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17413 vulnerable 2026-06-08 05:20:56.435071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17412 vulnerable 2026-06-08 05:20:56.434327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17411 vulnerable 2026-06-08 05:20:56.431597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-17410 vulnerable 2026-06-08 05:20:56.428334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15638 vulnerable 2026-06-08 05:19:26.274964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15637 vulnerable 2026-06-08 05:19:26.271982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10913 vulnerable 2026-06-08 05:16:36.023445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10912 vulnerable 2026-06-08 05:16:36.023068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10911 vulnerable 2026-06-08 05:16:36.022697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10910 vulnerable 2026-06-08 05:16:36.022317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10909 vulnerable 2026-06-08 05:16:36.021927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10908 vulnerable 2026-06-08 05:16:36.021550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10905 vulnerable 2026-06-08 05:16:36.020358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10904 vulnerable 2026-06-08 05:16:36.019957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10903 vulnerable 2026-06-08 05:16:36.019568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10902 vulnerable 2026-06-08 05:16:36.019182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10901 vulnerable 2026-06-08 05:16:36.018777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10898 vulnerable 2026-06-08 05:16:36.013402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10897 vulnerable 2026-06-08 05:16:36.013014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10896 vulnerable 2026-06-08 05:16:36.012613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10895 vulnerable 2026-06-08 05:16:36.012227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10894 vulnerable 2026-06-08 05:16:36.011821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10893 vulnerable 2026-06-08 05:16:36.011438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10892 vulnerable 2026-06-08 05:16:36.011047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10891 vulnerable 2026-06-08 05:16:36.010660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10890 vulnerable 2026-06-08 05:16:36.010224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10889 vulnerable 2026-06-08 05:16:36.008292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6776 vulnerable 2026-06-08 05:14:13.080017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6765 vulnerable 2026-06-08 05:14:13.074350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6762 vulnerable 2026-06-08 05:14:13.073043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6756 vulnerable 2026-06-08 05:14:13.069729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6752 vulnerable 2026-06-08 05:14:13.065531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6734 vulnerable 2026-06-08 05:14:13.039634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6733 vulnerable 2026-06-08 05:14:13.039255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6732 vulnerable 2026-06-08 05:14:13.038709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6731 vulnerable 2026-06-08 05:14:13.038085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17145 vulnerable 2026-06-08 05:13:10.032692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17144 vulnerable 2026-06-08 05:13:10.032274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17143 vulnerable 2026-06-08 05:13:10.031950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17142 vulnerable 2026-06-08 05:13:10.031526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17141 vulnerable 2026-06-08 05:13:10.031017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17140 vulnerable 2026-06-08 05:13:10.029360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17139 vulnerable 2026-06-08 05:13:10.027076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17136 vulnerable 2026-06-08 05:13:10.021411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17135 vulnerable 2026-06-08 05:13:10.020135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13334 vulnerable 2026-06-08 05:12:42.136989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13333 vulnerable 2026-06-08 05:12:42.133347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13317 vulnerable 2026-06-08 05:12:42.121356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13316 vulnerable 2026-06-08 05:12:42.120595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17701 vulnerable 2026-06-08 05:11:06.650167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17698 vulnerable 2026-06-08 05:11:06.648829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17695 vulnerable 2026-06-08 05:11:06.647551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17694 vulnerable 2026-06-08 05:11:06.647010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17693 vulnerable 2026-06-08 05:11:06.645718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17692 vulnerable 2026-06-08 05:11:06.645278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17691 vulnerable 2026-06-08 05:11:06.644826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17690 vulnerable 2026-06-08 05:11:06.644373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17689 vulnerable 2026-06-08 05:11:06.643986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17688 vulnerable 2026-06-08 05:11:06.643490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17687 vulnerable 2026-06-08 05:11:06.642890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.