Skip to content

Foxit · weakness class

File and Path Handling

13 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

  1. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.3.10826. User interaction is required to exploit this vulnerabil…CVE-2019-6754Foxit · CVSS 7.3 · 4.5% likely

    CWE-22

  2. A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files, which can lead to r…CVE-2023-39542Foxit · CVSS 8.8 · 3.8% likely

    CWE-73

  3. An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A…CVE-2023-35985Foxit · CVSS 8.8 · 2.7% likely

    CWE-73

  4. An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters. A specially craft…CVE-2023-40194Foxit · CVSS 8.8 · 2.0% likely

    CWE-73

  5. Foxit PDF Reader < 4.3.1.0218 JavaScript File WriteCVE-2011-10030Foxit Software · CVSS 8.4 · 0.5% likely

    CWE-73

  6. Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution VulnerabilityCVE-2026-91797Foxit Software Inc. · CVSS 7.8 · 0.3% likely

    CWE-73

  7. Foxit PDF Reader Link Following Local Privilege Escalation VulnerabilityCVE-2024-12753Foxit · CVSS 6.7 · 0.3% likely

    CWE-59

  8. Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityCVE-2026-3775Foxit Software Inc. · CVSS 7.8 · 0.3% likely

    CWE-427

  9. Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution VulnerabilityCVE-2026-91801Foxit Software Inc. · CVSS 7.8 · 0.2% likely

    CWE-22

  10. Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityCVE-2025-9330Foxit · CVSS 7.8 · 0.2% likely

    CWE-427

  11. Foxit PDF Editor/Reader Local Privilege EscalationCVE-2026-57239Foxit Software Inc. · CVSS 8.2 · 0.2% likelycovered by CyberSIXT

    CWE-427

  12. Foxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege EscalationCVE-2026-3780Foxit Software Inc. · CVSS 7.3 · 0.1% likely

    CWE-426

  13. Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path HijackingCVE-2026-91803Foxit Software Inc. · CVSS 8.8 · 0.1% likely

    CWE-427

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in