Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:pdf_editor:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductPdf Editor (9ffd62d3-3123-511f-93d6-d83211921c55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-30327 vulnerable 2026-06-08 06:35:29.531994 Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of template objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22632.
Published: 2024-04-03T16:22:11.355Z
Updated: 2024-08-27T19:48:02.803Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51562 vulnerable 2026-06-08 06:17:53.528431 Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability
LOW (3.3)
Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-22500.
Published: 2024-05-03T02:15:01.655Z
Updated: 2024-08-02T22:40:32.568Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51557 vulnerable 2026-06-08 06:17:53.512273 Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22256.
Published: 2024-05-03T02:14:57.662Z
Updated: 2024-08-02T22:40:34.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51556 vulnerable 2026-06-08 06:17:53.511320 Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22255.
Published: 2024-05-03T02:14:56.861Z
Updated: 2024-08-02T22:40:33.186Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51554 vulnerable 2026-06-08 06:17:53.499333 Foxit PDF Reader Signature Use-After-Free Information Disclosure Vulnerability
LOW (3.3)
Foxit PDF Reader Signature Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Signature objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-22122.
Published: 2024-05-03T02:14:55.379Z
Updated: 2024-08-02T22:40:32.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51553 vulnerable 2026-06-08 06:17:53.497652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51552 vulnerable 2026-06-08 06:17:53.496591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51551 vulnerable 2026-06-08 06:17:53.490429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51550 vulnerable 2026-06-08 06:17:53.485189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42098 vulnerable 2026-06-08 06:11:07.797252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42097 vulnerable 2026-06-08 06:11:07.796582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42096 vulnerable 2026-06-08 06:11:07.795951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42095 vulnerable 2026-06-08 06:11:07.795237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42094 vulnerable 2026-06-08 06:11:07.794565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42093 vulnerable 2026-06-08 06:11:07.793815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42092 vulnerable 2026-06-08 06:11:07.793064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42090 vulnerable 2026-06-08 06:11:07.789583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38118 vulnerable 2026-06-08 06:08:16.910426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38116 vulnerable 2026-06-08 06:08:16.909490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38111 vulnerable 2026-06-08 06:08:16.902801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27364 vulnerable 2026-06-08 05:57:40.984443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41780 vulnerable 2026-06-08 05:35:21.017331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34975 vulnerable 2026-06-08 05:32:17.240983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34974 vulnerable 2026-06-08 05:32:17.240382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34972 vulnerable 2026-06-08 05:32:17.239387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34971 vulnerable 2026-06-08 05:32:17.238827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34970 vulnerable 2026-06-08 05:32:17.238256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34966 vulnerable 2026-06-08 05:32:17.236390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34964 vulnerable 2026-06-08 05:32:17.235383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34961 vulnerable 2026-06-08 05:32:17.233799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34960 vulnerable 2026-06-08 05:32:17.233298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34958 vulnerable 2026-06-08 05:32:17.232367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34957 vulnerable 2026-06-08 05:32:17.231836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34956 vulnerable 2026-06-08 05:32:17.231183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34953 vulnerable 2026-06-08 05:32:17.229711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34951 vulnerable 2026-06-08 05:32:17.227024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34950 vulnerable 2026-06-08 05:32:17.224540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34948 vulnerable 2026-06-08 05:32:17.218582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.