Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:pdf_editor:11.0.0.49893:*:*:*:*:*:*:*

part: a version: 11.0.0.49893 update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductPdf Editor (9ffd62d3-3123-511f-93d6-d83211921c55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41780 vulnerable 2026-06-08 05:35:21.018883 Details available
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
Published: 2022-08-29T04:54:27.000Z
Updated: 2024-08-04T03:15:29.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34976 vulnerable 2026-06-08 05:32:17.241533 Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability
LOW (3.3)
Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-14659.
Published: 2024-05-07T22:54:48.308Z
Updated: 2024-08-04T00:26:55.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34975 vulnerable 2026-06-08 05:32:17.241091 Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of the transitionToState method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15218.
Published: 2024-05-07T22:54:47.464Z
Updated: 2024-08-04T00:26:55.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34974 vulnerable 2026-06-08 05:32:17.240422 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15167.
Published: 2024-05-07T22:54:46.557Z
Updated: 2024-08-04T00:26:55.722Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34973 vulnerable 2026-06-08 05:32:17.239961 Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability
LOW (3.3)
Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-14968.
Published: 2024-05-07T22:54:45.669Z
Updated: 2024-08-04T00:26:55.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34972 vulnerable 2026-06-08 05:32:17.239426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34971 vulnerable 2026-06-08 05:32:17.238939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34970 vulnerable 2026-06-08 05:32:17.238297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34969 vulnerable 2026-06-08 05:32:17.237808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34968 vulnerable 2026-06-08 05:32:17.237209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34967 vulnerable 2026-06-08 05:32:17.236808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34966 vulnerable 2026-06-08 05:32:17.236442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34965 vulnerable 2026-06-08 05:32:17.235859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34964 vulnerable 2026-06-08 05:32:17.235477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34963 vulnerable 2026-06-08 05:32:17.234788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34962 vulnerable 2026-06-08 05:32:17.234370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34961 vulnerable 2026-06-08 05:32:17.233892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34960 vulnerable 2026-06-08 05:32:17.233387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34959 vulnerable 2026-06-08 05:32:17.232818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34958 vulnerable 2026-06-08 05:32:17.232455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34957 vulnerable 2026-06-08 05:32:17.231937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34956 vulnerable 2026-06-08 05:32:17.231401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34955 vulnerable 2026-06-08 05:32:17.230751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34954 vulnerable 2026-06-08 05:32:17.230275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34953 vulnerable 2026-06-08 05:32:17.229755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34952 vulnerable 2026-06-08 05:32:17.229177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34950 vulnerable 2026-06-08 05:32:17.224636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34949 vulnerable 2026-06-08 05:32:17.223907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34948 vulnerable 2026-06-08 05:32:17.220562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.