https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-27517.htmlhttps://patchthecve.com/cve/CVE-2021-27517.htmlWed, 17 Jun 2026 03:45:00 +0000MEDIUM 6.1: Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert (in the Acrobat JavaScript API).https://patchthecve.com/cve/CVE-2021-31461.htmlhttps://patchthecve.com/cve/CVE-2021-31461.htmlWed, 17 Jun 2026 03:51:49 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the the hanhttps://patchthecve.com/cve/CVE-2021-31460.htmlhttps://patchthecve.com/cve/CVE-2021-31460.htmlWed, 17 Jun 2026 03:51:49 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processhttps://patchthecve.com/cve/CVE-2021-31459.htmlhttps://patchthecve.com/cve/CVE-2021-31459.htmlWed, 17 Jun 2026 03:51:49 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31458.htmlhttps://patchthecve.com/cve/CVE-2021-31458.htmlWed, 17 Jun 2026 03:51:49 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31457.htmlhttps://patchthecve.com/cve/CVE-2021-31457.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2021-31456.htmlhttps://patchthecve.com/cve/CVE-2021-31456.htmlWed, 17 Jun 2026 03:51:48 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlinhttps://patchthecve.com/cve/CVE-2018-20316.htmlhttps://patchthecve.com/cve/CVE-2018-20316.htmlWed, 17 Jun 2026 01:52:36 +0000HIGH 8.1: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode.https://patchthecve.com/cve/CVE-2018-20315.htmlhttps://patchthecve.com/cve/CVE-2018-20315.htmlWed, 17 Jun 2026 01:52:36 +0000HIGH 8.1: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read.https://patchthecve.com/cve/CVE-2018-20314.htmlhttps://patchthecve.com/cve/CVE-2018-20314.htmlWed, 17 Jun 2026 01:52:36 +0000HIGH 8.1: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow or an out-of-bounds read.https://patchthecve.com/cve/CVE-2018-20313.htmlhttps://patchthecve.com/cve/CVE-2018-20313.htmlWed, 17 Jun 2026 01:52:36 +0000HIGH 8.1: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.https://patchthecve.com/cve/CVE-2018-20312.htmlhttps://patchthecve.com/cve/CVE-2018-20312.htmlWed, 17 Jun 2026 01:52:36 +0000HIGH 8.1: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode.https://patchthecve.com/cve/CVE-2018-20311.htmlhttps://patchthecve.com/cve/CVE-2018-20311.htmlWed, 17 Jun 2026 01:52:36 +0000HIGH 8.1: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.https://patchthecve.com/cve/CVE-2018-20310.htmlhttps://patchthecve.com/cve/CVE-2018-20310.htmlWed, 17 Jun 2026 01:52:36 +0000HIGH 8.1: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.https://patchthecve.com/cve/CVE-2018-20309.htmlhttps://patchthecve.com/cve/CVE-2018-20309.htmlWed, 17 Jun 2026 01:52:35 +0000HIGH 8.1: Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow or an out-of-bounds read.https://patchthecve.com/cve/CVE-2020-12248.htmlhttps://patchthecve.com/cve/CVE-2020-12248.htmlWed, 17 Jun 2026 02:51:30 +0000HIGH 8.8: In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled.https://patchthecve.com/cve/CVE-2020-12247.htmlhttps://patchthecve.com/cve/CVE-2020-12247.htmlWed, 17 Jun 2026 02:51:30 +0000HIGH 7.1: In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts. A crash may also occur.https://patchthecve.com/cve/CVE-2020-11493.htmlhttps://patchthecve.com/cve/CVE-2020-11493.htmlWed, 17 Jun 2026 02:50:16 +0000HIGH 8.1: In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject.https://patchthecve.com/cve/CVE-2020-15638.htmlhttps://patchthecve.com/cve/CVE-2020-15638.htmlWed, 17 Jun 2026 02:56:57 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.2.29539. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Nodehttps://patchthecve.com/cve/CVE-2020-15637.htmlhttps://patchthecve.com/cve/CVE-2020-15637.htmlWed, 17 Jun 2026 02:56:57 +0000LOW 3.3: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within https://patchthecve.com/cve/CVE-2019-20837.htmlhttps://patchthecve.com/cve/CVE-2019-20837.htmlWed, 17 Jun 2026 02:31:17 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures.https://patchthecve.com/cve/CVE-2019-20836.htmlhttps://patchthecve.com/cve/CVE-2019-20836.htmlWed, 17 Jun 2026 02:31:17 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive.https://patchthecve.com/cve/CVE-2019-20835.htmlhttps://patchthecve.com/cve/CVE-2019-20835.htmlWed, 17 Jun 2026 02:31:17 +0000MEDIUM 4.3: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling.https://patchthecve.com/cve/CVE-2019-20830.htmlhttps://patchthecve.com/cve/CVE-2019-20830.htmlWed, 17 Jun 2026 02:31:16 +0000CRITICAL 9.8: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used.https://patchthecve.com/cve/CVE-2019-20829.htmlhttps://patchthecve.com/cve/CVE-2019-20829.htmlWed, 17 Jun 2026 02:31:16 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.https://patchthecve.com/cve/CVE-2019-20828.htmlhttps://patchthecve.com/cve/CVE-2019-20828.htmlWed, 17 Jun 2026 02:31:16 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs.https://patchthecve.com/cve/CVE-2019-20827.htmlhttps://patchthecve.com/cve/CVE-2019-20827.htmlWed, 17 Jun 2026 02:31:16 +0000CRITICAL 9.8: An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space.https://patchthecve.com/cve/CVE-2019-20826.htmlhttps://patchthecve.com/cve/CVE-2019-20826.htmlWed, 17 Jun 2026 02:31:16 +0000HIGH 7.5: An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference.https://patchthecve.com/cve/CVE-2018-21240.htmlhttps://patchthecve.com/cve/CVE-2018-21240.htmlWed, 17 Jun 2026 01:54:27 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.https://patchthecve.com/cve/CVE-2018-21239.htmlhttps://patchthecve.com/cve/CVE-2018-21239.htmlWed, 17 Jun 2026 01:54:26 +0000MEDIUM 5.3: An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action.https://patchthecve.com/cve/CVE-2018-21236.htmlhttps://patchthecve.com/cve/CVE-2018-21236.htmlWed, 17 Jun 2026 01:54:26 +0000HIGH 7.5: An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference.https://patchthecve.com/cve/CVE-2020-13815.htmlhttps://patchthecve.com/cve/CVE-2020-13815.htmlWed, 17 Jun 2026 02:53:42 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference.https://patchthecve.com/cve/CVE-2020-13814.htmlhttps://patchthecve.com/cve/CVE-2020-13814.htmlWed, 17 Jun 2026 02:53:42 +0000CRITICAL 9.8: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary.https://patchthecve.com/cve/CVE-2019-20820.htmlhttps://patchthecve.com/cve/CVE-2019-20820.htmlWed, 17 Jun 2026 02:31:15 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data.https://patchthecve.com/cve/CVE-2019-20819.htmlhttps://patchthecve.com/cve/CVE-2019-20819.htmlWed, 17 Jun 2026 02:31:15 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing.https://patchthecve.com/cve/CVE-2019-20818.htmlhttps://patchthecve.com/cve/CVE-2019-20818.htmlWed, 17 Jun 2026 02:31:15 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level.https://patchthecve.com/cve/CVE-2019-20817.htmlhttps://patchthecve.com/cve/CVE-2019-20817.htmlWed, 17 Jun 2026 02:31:15 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.https://patchthecve.com/cve/CVE-2020-13810.htmlhttps://patchthecve.com/cve/CVE-2020-13810.htmlWed, 17 Jun 2026 02:53:42 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures.https://patchthecve.com/cve/CVE-2020-13809.htmlhttps://patchthecve.com/cve/CVE-2020-13809.htmlWed, 17 Jun 2026 02:53:41 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream.https://patchthecve.com/cve/CVE-2020-13808.htmlhttps://patchthecve.com/cve/CVE-2020-13808.htmlWed, 17 Jun 2026 02:53:41 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data.https://patchthecve.com/cve/CVE-2020-13807.htmlhttps://patchthecve.com/cve/CVE-2020-13807.htmlWed, 17 Jun 2026 02:53:41 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop.https://patchthecve.com/cve/CVE-2020-13806.htmlhttps://patchthecve.com/cve/CVE-2020-13806.htmlWed, 17 Jun 2026 02:53:41 +0000HIGH 7.5: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation.https://patchthecve.com/cve/CVE-2020-13805.htmlhttps://patchthecve.com/cve/CVE-2020-13805.htmlWed, 17 Jun 2026 02:53:41 +0000CRITICAL 9.8: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures.https://patchthecve.com/cve/CVE-2020-13804.htmlhttps://patchthecve.com/cve/CVE-2020-13804.htmlWed, 17 Jun 2026 02:53:41 +0000CRITICAL 9.8: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin.https://patchthecve.com/cve/CVE-2020-13803.htmlhttps://patchthecve.com/cve/CVE-2020-13803.htmlWed, 17 Jun 2026 02:53:41 +0000HIGH 7.5: An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures.https://patchthecve.com/cve/CVE-2020-10912.htmlhttps://patchthecve.com/cve/CVE-2020-10912.htmlWed, 17 Jun 2026 02:48:40 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handhttps://patchthecve.com/cve/CVE-2020-10911.htmlhttps://patchthecve.com/cve/CVE-2020-10911.htmlWed, 17 Jun 2026 02:48:39 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handhttps://patchthecve.com/cve/CVE-2020-10910.htmlhttps://patchthecve.com/cve/CVE-2020-10910.htmlWed, 17 Jun 2026 02:48:39 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handhttps://patchthecve.com/cve/CVE-2020-10909.htmlhttps://patchthecve.com/cve/CVE-2020-10909.htmlWed, 17 Jun 2026 02:48:39 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handhttps://patchthecve.com/cve/CVE-2020-10908.htmlhttps://patchthecve.com/cve/CVE-2020-10908.htmlWed, 17 Jun 2026 02:48:39 +0000HIGH 7.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the hand