Skip to content

Foxitsoftware · weakness class

Input Validation and Logic

7 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a Data…CVE-2015-2790Foxitsoftware · 25% likely

    CWE-20

  2. An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trig…CVE-2019-5031Foxitsoftware · CVSS 8.8 · 6.0% likely

    CWE-703

  3. An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS). An attacker can s…CVE-2020-35931Foxitsoftware · 2.3% likely

    CWE-754

  4. An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash due to the lack of proper validation of the existence of an object prior to performing opera…CVE-2019-14211Foxitsoftware · 1.7% likely

    CWE-20

  5. Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream.CVE-2016-4061Foxitsoftware · 1.3% likely

    CWE-20

  6. Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled.CVE-2021-33795Foxitsoftware · 0.8% likely

    CWE-755

  7. A denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs when a user uploads a file that includes a hexadecimal Unicode character in the…CVE-2017-16813Foxitsoftware · 0.7% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.