phantompdf vulnerabilities and fixes

Recent CVEs affecting phantompdf, with upgrade or downgrade steps. 53 tracked.

phantompdf has 53 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 53. Most recent: 2022-08-29. Highest priority: CVE-2021-38573 (score 56/100).

• CVE-2022-25641 MEDIUM 5.5 UPGRADE UPGRADE Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-ref
• CVE-2021-41785 HIGH 7.8 UPGRADE UPGRADE Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trig
• CVE-2021-41784 HIGH 7.8 UPGRADE UPGRADE Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trig
• CVE-2021-41783 HIGH 7.8 UPGRADE UPGRADE Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trig
• CVE-2021-41782 HIGH 7.8 UPGRADE UPGRADE Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trig
• CVE-2021-41781 HIGH 7.8 UPGRADE UPGRADE Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trig
• CVE-2021-41780 HIGH 7.8 UPGRADE UPGRADE Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trig
• CVE-2021-40326 MEDIUM 5.5 UPGRADE UPGRADE Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and in
• CVE-2021-38574 CRITICAL 9.8 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38573 CRITICAL 9.8 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38572 CRITICAL 9.8 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38571 HIGH 7.8 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38570 CRITICAL 9.1 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38569 HIGH 7.5 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-38568 CRITICAL 9.8 UPGRADE UPGRADE An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
• CVE-2021-33795 MEDIUM 5.5 UPGRADE UPGRADE Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the
• CVE-2021-33794 CRITICAL 9.1 UPGRADE UPGRADE Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash a
• CVE-2021-33793 CRITICAL 9.8 UPGRADE UPGRADE Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Referenc
• CVE-2021-33792 HIGH 7.8 UPGRADE UPGRADE Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in
• CVE-2021-31476 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-31461 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31460 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31459 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31458 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31457 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31456 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31455 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31454 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31453 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31452 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31451 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31450 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31449 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31448 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31447 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31446 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31445 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31444 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31443 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-31442 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31441 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-27517 MEDIUM 6.1 UPGRADE UPGRADE Foxit PDF SDK For Web through 7.5.0 allows XSS
• CVE-2021-27271 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-27270 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-27269 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-27268 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-27267 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2021-27266 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-27265 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-27264 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-27263 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-27262 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2021-27261 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto

FAQ

How do I fix phantompdf vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is phantompdf being exploited right now?

None of the tracked phantompdf CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which phantompdf CVE should I patch first?

CVE-2021-38573 currently ranks highest (56/100): An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4.

RSS feed for phantompdf · ← Back to latest CVEs