https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-25641.htmlhttps://patchthecve.com/cve/CVE-2022-25641.htmlWed, 17 Jun 2026 04:33:49 +0000MEDIUM 5.5: Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents. This leads to delivery of incorrect signature information via an Incremental Saving Attack and a Shadow Attack.https://patchthecve.com/cve/CVE-2021-41785.htmlhttps://patchthecve.com/cve/CVE-2021-41785.htmlWed, 17 Jun 2026 04:08:54 +0000HIGH 7.8: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.https://patchthecve.com/cve/CVE-2021-41784.htmlhttps://patchthecve.com/cve/CVE-2021-41784.htmlWed, 17 Jun 2026 04:08:54 +0000HIGH 7.8: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.https://patchthecve.com/cve/CVE-2021-41783.htmlhttps://patchthecve.com/cve/CVE-2021-41783.htmlWed, 17 Jun 2026 04:08:54 +0000HIGH 7.8: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.https://patchthecve.com/cve/CVE-2021-41782.htmlhttps://patchthecve.com/cve/CVE-2021-41782.htmlWed, 17 Jun 2026 04:08:54 +0000HIGH 7.8: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.https://patchthecve.com/cve/CVE-2021-41781.htmlhttps://patchthecve.com/cve/CVE-2021-41781.htmlWed, 17 Jun 2026 04:08:54 +0000HIGH 7.8: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.https://patchthecve.com/cve/CVE-2021-41780.htmlhttps://patchthecve.com/cve/CVE-2021-41780.htmlWed, 17 Jun 2026 04:08:54 +0000HIGH 7.8: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.https://patchthecve.com/cve/CVE-2021-40326.htmlhttps://patchthecve.com/cve/CVE-2021-40326.htmlWed, 17 Jun 2026 04:06:43 +0000MEDIUM 5.5: Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.https://patchthecve.com/cve/CVE-2021-38574.htmlhttps://patchthecve.com/cve/CVE-2021-38574.htmlWed, 17 Jun 2026 04:02:23 +0000CRITICAL 9.8: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string.https://patchthecve.com/cve/CVE-2021-38573.htmlhttps://patchthecve.com/cve/CVE-2021-38573.htmlWed, 17 Jun 2026 04:02:23 +0000CRITICAL 9.8: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.https://patchthecve.com/cve/CVE-2021-38572.htmlhttps://patchthecve.com/cve/CVE-2021-38572.htmlWed, 17 Jun 2026 04:02:23 +0000CRITICAL 9.8: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated.https://patchthecve.com/cve/CVE-2021-38571.htmlhttps://patchthecve.com/cve/CVE-2021-38571.htmlWed, 17 Jun 2026 04:02:23 +0000HIGH 7.8: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502.https://patchthecve.com/cve/CVE-2021-38570.htmlhttps://patchthecve.com/cve/CVE-2021-38570.htmlWed, 17 Jun 2026 04:02:22 +0000CRITICAL 9.1: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink.https://patchthecve.com/cve/CVE-2021-38569.htmlhttps://patchthecve.com/cve/CVE-2021-38569.htmlWed, 17 Jun 2026 04:02:22 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects.https://patchthecve.com/cve/CVE-2021-38568.htmlhttps://patchthecve.com/cve/CVE-2021-38568.htmlWed, 17 Jun 2026 04:02:22 +0000CRITICAL 9.8: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document format.https://patchthecve.com/cve/CVE-2021-33794.htmlhttps://patchthecve.com/cve/CVE-2021-33794.htmlWed, 17 Jun 2026 03:55:14 +0000CRITICAL 9.1: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction.https://patchthecve.com/cve/CVE-2021-33793.htmlhttps://patchthecve.com/cve/CVE-2021-33793.htmlWed, 17 Jun 2026 03:55:14 +0000CRITICAL 9.8: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion.https://patchthecve.com/cve/CVE-2021-27517.htmlhttps://patchthecve.com/cve/CVE-2021-27517.htmlWed, 17 Jun 2026 03:45:00 +0000MEDIUM 6.1: Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert (in the Acrobat JavaScript API).https://patchthecve.com/cve/CVE-2021-33795.htmlhttps://patchthecve.com/cve/CVE-2021-33795.htmlWed, 17 Jun 2026 03:55:14 +0000MEDIUM 5.5: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled.https://patchthecve.com/cve/CVE-2021-33792.htmlhttps://patchthecve.com/cve/CVE-2021-33792.htmlWed, 17 Jun 2026 03:55:14 +0000HIGH 7.8: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary.https://patchthecve.com/cve/CVE-2021-31476.htmlhttps://patchthecve.com/cve/CVE-2021-31476.htmlWed, 17 Jun 2026 03:51:52 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the hanhttps://patchthecve.com/cve/CVE-2021-31461.htmlhttps://patchthecve.com/cve/CVE-2021-31461.htmlWed, 17 Jun 2026 03:51:49 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the the hanhttps://patchthecve.com/cve/CVE-2021-31460.htmlhttps://patchthecve.com/cve/CVE-2021-31460.htmlWed, 17 Jun 2026 03:51:49 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processhttps://patchthecve.com/cve/CVE-2021-31459.htmlhttps://patchthecve.com/cve/CVE-2021-31459.htmlWed, 17 Jun 2026 03:51:49 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31458.htmlhttps://patchthecve.com/cve/CVE-2021-31458.htmlWed, 17 Jun 2026 03:51:49 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31457.htmlhttps://patchthecve.com/cve/CVE-2021-31457.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31456.htmlhttps://patchthecve.com/cve/CVE-2021-31456.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31455.htmlhttps://patchthecve.com/cve/CVE-2021-31455.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31454.htmlhttps://patchthecve.com/cve/CVE-2021-31454.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31453.htmlhttps://patchthecve.com/cve/CVE-2021-31453.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31452.htmlhttps://patchthecve.com/cve/CVE-2021-31452.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31451.htmlhttps://patchthecve.com/cve/CVE-2021-31451.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31450.htmlhttps://patchthecve.com/cve/CVE-2021-31450.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31449.htmlhttps://patchthecve.com/cve/CVE-2021-31449.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31448.htmlhttps://patchthecve.com/cve/CVE-2021-31448.htmlWed, 17 Jun 2026 03:51:47 +0000LOW 3.3: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within thehttps://patchthecve.com/cve/CVE-2021-31447.htmlhttps://patchthecve.com/cve/CVE-2021-31447.htmlWed, 17 Jun 2026 03:51:47 +0000LOW 3.3: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within thehttps://patchthecve.com/cve/CVE-2021-31446.htmlhttps://patchthecve.com/cve/CVE-2021-31446.htmlWed, 17 Jun 2026 03:51:47 +0000LOW 3.3: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within thehttps://patchthecve.com/cve/CVE-2021-31445.htmlhttps://patchthecve.com/cve/CVE-2021-31445.htmlWed, 17 Jun 2026 03:51:47 +0000LOW 3.3: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within thehttps://patchthecve.com/cve/CVE-2021-31444.htmlhttps://patchthecve.com/cve/CVE-2021-31444.htmlWed, 17 Jun 2026 03:51:47 +0000LOW 3.3: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within thehttps://patchthecve.com/cve/CVE-2021-31443.htmlhttps://patchthecve.com/cve/CVE-2021-31443.htmlWed, 17 Jun 2026 03:51:47 +0000LOW 3.3: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within thehttps://patchthecve.com/cve/CVE-2021-31442.htmlhttps://patchthecve.com/cve/CVE-2021-31442.htmlWed, 17 Jun 2026 03:51:47 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31441.htmlhttps://patchthecve.com/cve/CVE-2021-31441.htmlWed, 17 Jun 2026 03:51:47 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-27271.htmlhttps://patchthecve.com/cve/CVE-2021-27271.htmlWed, 17 Jun 2026 03:44:35 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the hanhttps://patchthecve.com/cve/CVE-2021-27270.htmlhttps://patchthecve.com/cve/CVE-2021-27270.htmlWed, 17 Jun 2026 03:44:35 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parhttps://patchthecve.com/cve/CVE-2021-27269.htmlhttps://patchthecve.com/cve/CVE-2021-27269.htmlWed, 17 Jun 2026 03:44:35 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the hanhttps://patchthecve.com/cve/CVE-2021-27268.htmlhttps://patchthecve.com/cve/CVE-2021-27268.htmlWed, 17 Jun 2026 03:44:35 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the hanhttps://patchthecve.com/cve/CVE-2021-27267.htmlhttps://patchthecve.com/cve/CVE-2021-27267.htmlWed, 17 Jun 2026 03:44:35 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the hanhttps://patchthecve.com/cve/CVE-2021-27266.htmlhttps://patchthecve.com/cve/CVE-2021-27266.htmlWed, 17 Jun 2026 03:44:34 +0000LOW 3.3: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withinhttps://patchthecve.com/cve/CVE-2021-27265.htmlhttps://patchthecve.com/cve/CVE-2021-27265.htmlWed, 17 Jun 2026 03:44:34 +0000LOW 3.3: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withinhttps://patchthecve.com/cve/CVE-2021-27264.htmlhttps://patchthecve.com/cve/CVE-2021-27264.htmlWed, 17 Jun 2026 03:44:34 +0000LOW 3.3: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within