reader vulnerabilities and fixes

Recent CVEs affecting reader, with upgrade or downgrade steps. 20 tracked.

reader has 20 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 20. Most recent: 2021-07-20. Highest priority: CVE-2020-15638 (score 51/100).

• CVE-2021-31461 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31460 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31459 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31458 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31457 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-31456 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader
• CVE-2021-27517 MEDIUM 6.1 UPGRADE UPGRADE Foxit PDF SDK For Web through 7.5.0 allows XSS
• CVE-2020-15638 HIGH 7.8 UPGRADE UPGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto
• CVE-2020-15637 LOW 3.3 UPGRADE UPGRADE This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxi
• CVE-2020-12248 HIGH 8.8 UPGRADE UPGRADE In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary cod
• CVE-2020-12247 HIGH 7.1 UPGRADE UPGRADE In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive info
• CVE-2020-11493 HIGH 8.1 UPGRADE UPGRADE In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive info
• CVE-2018-20316 HIGH 8.1 UPGRADE UPGRADE Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition t
• CVE-2018-20315 HIGH 8.1 UPGRADE UPGRADE Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause
• CVE-2018-20314 HIGH 8.1 UPGRADE UPGRADE Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race conditi
• CVE-2018-20313 HIGH 8.1 UPGRADE UPGRADE Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condit
• CVE-2018-20312 HIGH 8.1 UPGRADE UPGRADE Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition t
• CVE-2018-20311 HIGH 8.1 UPGRADE UPGRADE Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition
• CVE-2018-20310 HIGH 8.1 UPGRADE UPGRADE Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition t
• CVE-2018-20309 HIGH 8.1 UPGRADE UPGRADE Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condit

FAQ

How do I fix reader vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is reader being exploited right now?

None of the tracked reader CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which reader CVE should I patch first?

CVE-2020-15638 currently ranks highest (51/100): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Phanto.

RSS feed for reader · ← Back to latest CVEs