Vulnerabilidades em Foxit Software Inc.
102 resultadosAnálise Vexday
Foxit Software apresenta volume preocupante com 36 vulnerabilidades publicadas nos últimos 90 dias em um portfólio de 63 CVEs, indicando atividade de descoberta ou divulgação intensificada. A fraqueza dominante (CWE-416 - use-after-free) é típica de aplicações complexas e pode resultar em execução de código, mas nenhuma está registrada em exploração ativa (KEV) e nenhuma atinge criticidade máxima. O padrão recente sugere maior exposição a risco durante processo de patching.
CVE-2025-66497MEDIUMFoxit PDF Reader 3D Annotation Out-of-Bounds Memory Access VulnerabilityEPSS 0.2%CVE-2025-66498MEDIUMFoxit PDF Reader 3D Annotation Out-of-Bounds Memory Access VulnerabilityEPSS 0.2%CVE-2025-66500MEDIUMFoxit webplugins.foxit.com Stored Cross-Site Scripting via postMessage VulnerabilityEPSS 0.2%CVE-2026-91801HIGHFoxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-5936HIGHServer-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services APIEPSS 0.2%CVE-2025-66523MEDIUMReflected Cross-Site Scripting (XSS) Vulnerability in na1.foxitesign.foxit.com via Unsanitized URL ParametersEPSS 0.2%CVE-2025-13941HIGHFoxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation VulnerabilityEPSS 0.2%CVE-2026-57240HIGHFoxit PDF Editor/Reader Form Field Use-After-Free Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-91815HIGHFoxit PDF Editor/Reader JPEG2000 Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-91799HIGHFoxit Editor/Reader Array resetForm Use-After-Free VulnerabilityEPSS 0.2%CVE-2026-91791HIGHFoxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-5942MEDIUMFoxit PDF Editor/Reader AcroForm Signature Use-After-Free VulnerabilityEPSS 0.2%CVE-2026-5943HIGHFoxit PDF Editor/Reader AcroForm Annotation Use-After-Free Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-66519MEDIUMFoxit pdfonline.foxit.com Stored Cross-Site Scripting in Layer Import FunctionalityEPSS 0.2%CVE-2025-66520MEDIUMFoxit pdfonline.foxit.com Stored Cross-Site Scripting in Portfolio SVG HandlingEPSS 0.2%CVE-2025-66502MEDIUMFoxit pdfonline.foxit.com Stored Cross-Site Scripting in Page Templates FeatureEPSS 0.2%CVE-2025-66501MEDIUMFoxit pdfonline.foxit.com Stored Cross-Site Scripting in eSign Predefined Text FeatureEPSS 0.2%CVE-2025-66522MEDIUMFoxit pdfonline.foxit.com Stored Cross-Site Scripting in Digital IDs Common Name FieldEPSS 0.2%CVE-2026-4947HIGHInsecure Direct Object Reference (IDOR) Leading to Signature Forgery in Foxit eSignEPSS 0.2%CVE-2026-57256HIGHFoxit Editor/Reader List Box Format Use-After-Free VulnerabilityEPSS 0.2%