Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:pdf_reader:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductPdf Reader (e9c9f198-a64d-5586-91d0-9e5c428b0da1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9255 vulnerable 2026-06-08 07:00:27.008877 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25174.
Published: 2024-11-22T21:19:00.522Z
Updated: 2024-11-26T15:57:53.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9254 vulnerable 2026-06-08 07:00:27.008192 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25173.
Published: 2024-11-22T21:19:05.561Z
Updated: 2024-11-26T15:57:53.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9250 vulnerable 2026-06-08 07:00:27.005561 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24489.
Published: 2024-11-22T21:19:22.615Z
Updated: 2024-11-26T15:57:54.040Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9249 vulnerable 2026-06-08 07:00:27.004841 Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24301.
Published: 2024-11-22T21:16:42.757Z
Updated: 2024-11-26T15:57:53.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9248 vulnerable 2026-06-08 07:00:27.004311 Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24300.
Published: 2024-11-22T21:19:26.589Z
Updated: 2024-11-26T15:57:54.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9247 vulnerable 2026-06-08 07:00:27.003658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9245 vulnerable 2026-06-08 07:00:27.002574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9244 vulnerable 2026-06-08 07:00:27.001987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9243 vulnerable 2026-06-08 07:00:26.997259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32488 vulnerable 2026-06-08 06:35:33.213437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30371 vulnerable 2026-06-08 06:35:29.658944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30367 vulnerable 2026-06-08 06:35:29.567919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30365 vulnerable 2026-06-08 06:35:29.566417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30362 vulnerable 2026-06-08 06:35:29.564502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30361 vulnerable 2026-06-08 06:35:29.563227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30360 vulnerable 2026-06-08 06:35:29.562318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30359 vulnerable 2026-06-08 06:35:29.561669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30358 vulnerable 2026-06-08 06:35:29.560601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30357 vulnerable 2026-06-08 06:35:29.559690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30354 vulnerable 2026-06-08 06:35:29.557647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30353 vulnerable 2026-06-08 06:35:29.556867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30352 vulnerable 2026-06-08 06:35:29.555907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30351 vulnerable 2026-06-08 06:35:29.554841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30349 vulnerable 2026-06-08 06:35:29.553038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30348 vulnerable 2026-06-08 06:35:29.552260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30346 vulnerable 2026-06-08 06:35:29.550414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30345 vulnerable 2026-06-08 06:35:29.549585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30344 vulnerable 2026-06-08 06:35:29.548458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30337 vulnerable 2026-06-08 06:35:29.543846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30336 vulnerable 2026-06-08 06:35:29.542913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30335 vulnerable 2026-06-08 06:35:29.542061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30331 vulnerable 2026-06-08 06:35:29.534784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30330 vulnerable 2026-06-08 06:35:29.534133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30323 vulnerable 2026-06-08 06:35:29.521889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51560 vulnerable 2026-06-08 06:17:53.515520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51559 vulnerable 2026-06-08 06:17:53.514383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51558 vulnerable 2026-06-08 06:17:53.513544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51555 vulnerable 2026-06-08 06:17:53.510426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42091 vulnerable 2026-06-08 06:11:07.792332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38116 vulnerable 2026-06-08 06:08:16.909183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38114 vulnerable 2026-06-08 06:08:16.907943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27366 vulnerable 2026-06-08 05:57:40.985571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27329 vulnerable 2026-06-08 05:57:40.887124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41780 vulnerable 2026-06-08 05:35:21.016389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34975 vulnerable 2026-06-08 05:32:17.241012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34974 vulnerable 2026-06-08 05:32:17.240352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34972 vulnerable 2026-06-08 05:32:17.239359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34971 vulnerable 2026-06-08 05:32:17.238858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34970 vulnerable 2026-06-08 05:32:17.238226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34964 vulnerable 2026-06-08 05:32:17.235413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34961 vulnerable 2026-06-08 05:32:17.233829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34960 vulnerable 2026-06-08 05:32:17.233326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34958 vulnerable 2026-06-08 05:32:17.232395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34957 vulnerable 2026-06-08 05:32:17.231869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34956 vulnerable 2026-06-08 05:32:17.231330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34953 vulnerable 2026-06-08 05:32:17.229675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34951 vulnerable 2026-06-08 05:32:17.227052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34950 vulnerable 2026-06-08 05:32:17.224573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34948 vulnerable 2026-06-08 05:32:17.217848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.