Skip to content

Foxitsoftware · product

Foxit

11 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
2

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

  1. A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of pr…CVE-2020-13557Foxitsoftware · CVSS 8.8 · 70% likely

    CWE-416

  2. In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick t…CVE-2020-13548Foxitsoftware · CVSS 8 · 66% likely

    CWE-416

  3. An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trig…CVE-2019-5031Foxitsoftware · CVSS 8.8 · 6.0% likely

    CWE-703

  4. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously fre…CVE-2019-5126Foxitsoftware · CVSS 8.8 · 3.5% likely

    CWE-416

  5. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously fre…CVE-2019-5145Foxitsoftware · CVSS 8.8 · 3.1% likely

    CWE-416

  6. A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of pr…CVE-2020-13560Foxitsoftware · CVSS 8.8 · 3.0% likely

    CWE-416

  7. A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper…CVE-2020-13547Foxitsoftware · CVSS 8.8 · 3.0% likely

    CWE-843

  8. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger…CVE-2019-5131Foxitsoftware · CVSS 8.8 · 2.4% likely

    CWE-416

  9. A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of prev…CVE-2020-13570Foxitsoftware · CVSS 7.5 · 2.3% likely

    CWE-416

  10. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.7.0.29435. A specially crafted PDF document can trigger…CVE-2019-5130Foxitsoftware · CVSS 8 · 2.3% likely

    CWE-416

  11. A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of prev…CVE-2021-21822Foxitsoftware · CVSS 8.8 · 1.8% likely

    CWE-416

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.