Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:pdf_reader:10.1.4.37651:*:*:*:*:*:*:*

part: a version: 10.1.4.37651 update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductPdf Reader (e9c9f198-a64d-5586-91d0-9e5c428b0da1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21870 vulnerable 2026-06-03 14:43:46.086861 Details available
HIGH (8.8)
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a malicious file or site to trigger this vulnerability if the browser plugin extension is enabled.
Published: 2021-08-05T20:07:26.000Z
Updated: 2024-08-03T18:23:29.544Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.