foxit reader vulnerabilities and fixes

Recent CVEs affecting foxit reader, with upgrade or downgrade steps. 40 tracked.

Also searched as: foxitreader.

foxit reader has 40 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 39. Most recent: 2022-11-09. Highest priority: CVE-2021-38573 (score 56/100).

• CVE-2022-43310 HIGH 7.8 UPGRADE An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers t
• CVE-2021-38574 CRITICAL 9.8 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38573 CRITICAL 9.8 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38572 CRITICAL 9.8 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38571 HIGH 7.8 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38570 CRITICAL 9.1 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38569 HIGH 7.5 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38568 CRITICAL 9.8 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-33795 MEDIUM 5.5 UPGRADE UPGRADE Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the
• CVE-2021-33794 CRITICAL 9.1 UPGRADE UPGRADE Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash a
• CVE-2021-33793 CRITICAL 9.8 UPGRADE UPGRADE Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Referenc
• CVE-2021-33792 HIGH 7.8 UPGRADE UPGRADE Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in
• CVE-2021-31476 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-31455 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31454 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31453 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31452 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31451 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31450 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31449 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31448 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31447 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31446 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31445 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31444 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31443 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31442 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31441 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-27271 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-27270 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-27269 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-27268 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-27267 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-27266 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-27265 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-27264 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-27263 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-27262 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-27261 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-21822 HIGH 8.8 DOWNGRADE A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.

FAQ

How do I fix foxit reader vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is foxit reader being exploited right now?

None of the tracked foxit reader CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which foxit reader CVE should I patch first?

CVE-2021-38573 currently ranks highest (56/100): An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

RSS feed for foxit reader · ← Back to latest CVEs