Skip to content

Foxitsoftware · weakness class

File and Path Handling

12 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL l…CVE-2017-12892Foxitsoftware · 3.3% likely

    CWE-426

  2. An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029.CVE-2018-21244Foxitsoftware · 1.8% likely

    CWE-434

  3. An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specif…CVE-2022-43310Foxitsoftware · CVSS 7.8 · 1.7% likely

    CWE-427

  4. An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink.CVE-2021-38570Foxitsoftware · 1.2% likely

    CWE-59

  5. A Directory Traversal issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs by abusing the URL + escape character during a Wi-Fi transfer, which could be…CVE-2017-16814Foxitsoftware · 1.1% likely

    CWE-22

  6. Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current…CVE-2011-3691Foxitsoftware · 1.1% likely

    CWE-426

  7. An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used.CVE-2018-21243Foxitsoftware · 0.9% likely

    CWE-434

  8. An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code.CVE-2018-21241Foxitsoftware · 0.8% likely

    CWE-426

  9. An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory when FoxitStudioPhoto36…CVE-2020-13813Foxitsoftware · 0.8% likely

    CWE-426

  10. An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory.CVE-2020-13812Foxitsoftware · 0.8% likely

    CWE-426

  11. An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502.CVE-2021-38571Foxitsoftware · 0.5% likely

    CWE-427

  12. An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory.CVE-2020-26538Foxitsoftware · 0.5% likely

    CWE-427

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in