Skip to content

Foxit · product

PDF Reader

219 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
6

Every one of the 219 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34833Foxit · CVSS 7.8 · 96% likely

    CWE-416

  2. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34847Foxit · CVSS 7.8 · 62% likely

    CWE-416

  3. Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution VulnerabilityCVE-2023-27363Foxit · CVSS 7.8 · 42% likely

    CWE-749

  4. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34850Foxit · CVSS 7.8 · 38% likely

    CWE-416

  5. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34842Foxit · CVSS 7.8 · 13% likely

    CWE-416

  6. Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrin…CVE-2022-24954Foxit · 12% likely

    CWE-787

  7. Foxit Reader 2.0 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.CVE-2007-2186Foxit · 7.6% likely
  8. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34853Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  9. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34852Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  10. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34851Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  11. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34846Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  12. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34845Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  13. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34844Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  14. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34841Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  15. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34840Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  16. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34839Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  17. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34837Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  18. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34832Foxit · CVSS 7.8 · 4.0% likely

    CWE-416

  19. Foxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityCVE-2023-27331Foxit · CVSS 7.8 · 3.9% likely

    CWE-416

  20. Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution VulnerabilityCVE-2023-27330Foxit · CVSS 7.8 · 3.9% likely

    CWE-416

  21. Foxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityCVE-2023-27329Foxit · CVSS 7.8 · 3.9% likely

    CWE-416

  22. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34838Foxit · CVSS 7.8 · 3.8% likely

    CWE-416

  23. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34836Foxit · CVSS 7.8 · 3.8% likely

    CWE-416

  24. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34848Foxit · CVSS 7.8 · 3.5% likely

    CWE-416

  25. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34835Foxit · CVSS 7.8 · 3.1% likely

    CWE-416

  26. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34834Foxit · CVSS 7.8 · 3.1% likely

    CWE-416

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.