Foxitsoftware · weakness class

Access Control

4 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via a…CVE-2016-4064Foxitsoftware · 4.2% likely
CWE-284
A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can…CVE-2018-19446Foxitsoftware · 2.2% likely
CWE-732
Foxit Reader for Mac 2.1.0.0804 and earlier and Foxit Reader for Linux 2.1.0.0805 and earlier suffered from a vulnerability where weak file permissions could be exploited by attac…CVE-2016-8856Foxitsoftware · 0.8% likely
CWE-275
A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorrect permission set.CVE-2019-8342Foxitsoftware · 0.5% likely
CWE-732

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.