Vulnerabilities in Foxit
776 resultsVexday analysis
Com 776 CVEs catalogadas e nenhuma atualmente listada no catálogo KEV da CISA, o Foxit apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere menor pressão imediata de ameaças confirmadas em campo. No entanto, o escore EPSS de 0,8948 associado a CVE-2021-34833 indica altíssima probabilidade estatística de exploração para essa vulnerabilidade específica, merecendo atenção prioritária mesmo na ausência de confirmação formal no KEV. O tipo de falha mais recorrente é CWE-416 (use-after-free), categoria historicamente propícia à execução de código arbitrário e frequentemente visada em leitores e editores de PDF. A existência de PoCs públicas para duas vulnerabilidades reforça a necessidade de manter patches aplicados, ainda que o volume de novas CVEs nos últimos 90 dias esteja zerado.
CVE-2018-17679—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interactioEPSS 4.6%CVE-2019-6754HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interactionEPSS 4.5%CVE-2019-6769HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interactiEPSS 4.3%CVE-2019-6733—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiEPSS 4.3%CVE-2019-6735—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction iEPSS 4.3%CVE-2021-31461HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 4.3%CVE-2020-17403HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 4.3%CVE-2020-17404HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interacEPSS 4.3%CVE-2019-6775HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interactionEPSS 4.2%CVE-2019-6774HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828. User interactionEPSS 4.2%CVE-2019-6734—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiEPSS 4.2%CVE-2020-8852LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.7.0.29455. User intEPSS 4.2%CVE-2020-17413HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaEPSS 4.2%CVE-2020-17412HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaEPSS 4.2%CVE-2019-6730—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is requirEPSS 4.2%CVE-2019-6727—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is requirEPSS 4.2%CVE-2018-9950—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User iEPSS 4.1%CVE-2019-13320HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interactionEPSS 4.1%CVE-2019-13319HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interactionEPSS 4.1%CVE-2019-6732—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiEPSS 4.1%