Vulnerabilidades em Foxit Software Inc.
102 resultadosAnálise Vexday
Foxit Software apresenta volume preocupante com 36 vulnerabilidades publicadas nos últimos 90 dias em um portfólio de 63 CVEs, indicando atividade de descoberta ou divulgação intensificada. A fraqueza dominante (CWE-416 - use-after-free) é típica de aplicações complexas e pode resultar em execução de código, mas nenhuma está registrada em exploração ativa (KEV) e nenhuma atinge criticidade máxima. O padrão recente sugere maior exposição a risco durante processo de patching.
CVE-2026-111418HIGHSSRF and JavaScript Execution in the Foxit Official Website's HTML-to-PDF ServiceEPSS 0.4%CVE-2026-57259MEDIUMFoxit PDF Editor/Reader XDP XFA XXE arbitrary local file readEPSS 0.4%CVE-2026-91797HIGHFoxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-111419HIGHHardcoded API Token in Foxit Official WebsiteEPSS 0.3%CVE-2026-111417HIGHCross-user Document Access on Foxit Official Website's HTML-to-PDF ServiceEPSS 0.3%CVE-2026-3779HIGHFoxit PDF Editor/Reader List Box Calculate Array Use-After-Free VulnerabilityEPSS 0.3%CVE-2026-119433HIGHServer-Side Request Forgery in Foxit Workspace PDF ExportEPSS 0.3%CVE-2026-119431HIGHServer-Side Request Forgery in Foxit Workspace File UploadEPSS 0.3%CVE-2026-119432HIGHFoxit Workspace Stored XSS in shared artifactsEPSS 0.3%CVE-2026-18597HIGHBlind SSRF on Foxit PDF Services APIEPSS 0.3%CVE-2025-66494HIGHFoxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-66495HIGHFoxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-66493HIGHFoxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-66499HIGHFoxit PDF Reader PDF Parsing Heap-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-3775HIGHFoxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2026-1591MEDIUMStored XSS via Attachments Feature in https://pdfonline.foxit.com/EPSS 0.2%CVE-2026-1592MEDIUMStored XSS via Create New Layer Field found in Foxit PDF Editor CloudEPSS 0.2%CVE-2026-91794HIGHFoxit PDF Editor/Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-91789HIGHFoxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-66497MEDIUMFoxit PDF Reader 3D Annotation Out-of-Bounds Memory Access VulnerabilityEPSS 0.2%