Skip to content

Foxitsoftware · product

Phantompdf

89 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 89 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulne…CVE-2018-17700Foxitsoftware · 3.9% likely

    CWE-125

  2. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5679Foxitsoftware · 3.8% likely

    CWE-125

  3. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5678Foxitsoftware · 3.8% likely

    CWE-119

  4. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5677Foxitsoftware · 3.8% likely

    CWE-125

  5. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5674Foxitsoftware · 3.8% likely

    CWE-119

  6. An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to…CVE-2018-7407Foxitsoftware · 3.7% likely

    CWE-704

  7. An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to…CVE-2018-7406Foxitsoftware · 3.7% likely

    CWE-129

  8. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5675Foxitsoftware · 3.7% likely

    CWE-787

  9. In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index contin…CVE-2020-12247Foxitsoftware · 3.6% likely

    CWE-125

  10. Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are…CVE-2018-17611Foxitsoftware · 3.2% likely

    CWE-416

  11. Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are…CVE-2018-17610Foxitsoftware · 3.2% likely

    CWE-416

  12. Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are…CVE-2018-17609Foxitsoftware · 3.2% likely

    CWE-416

  13. Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are…CVE-2018-17608Foxitsoftware · 3.2% likely

    CWE-416

  14. Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are…CVE-2018-17607Foxitsoftware · 3.2% likely

    CWE-416

  15. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5680Foxitsoftware · 3.1% likely

    CWE-125

  16. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF before 9.1. User interaction is required…CVE-2018-5676Foxitsoftware · 3.1% likely

    CWE-119

  17. Heap buffer overflow (Out-of-Bounds write) vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted JPEG2…CVE-2016-8877Foxitsoftware · 2.9% likely

    CWE-787

  18. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CV…CVE-2018-16297Foxitsoftware · 2.7% likely

    CWE-416

  19. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CV…CVE-2018-16296Foxitsoftware · 2.7% likely

    CWE-416

  20. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CV…CVE-2018-16295Foxitsoftware · 2.7% likely

    CWE-416

  21. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CV…CVE-2018-16294Foxitsoftware · 2.7% likely

    CWE-416

  22. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CV…CVE-2018-16293Foxitsoftware · 2.7% likely

    CWE-416

  23. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CV…CVE-2018-16292Foxitsoftware · 2.7% likely

    CWE-416

  24. An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16292, CV…CVE-2018-16291Foxitsoftware · 2.7% likely

    CWE-416

  25. Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a craf…CVE-2016-8878Foxitsoftware · 2.6% likely

    CWE-125

  26. Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishan…CVE-2018-17781Foxitsoftware · 2.4% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.