Skip to content

CyberSIXT Search

Vendor

Foxit Software Inc.

No Foxit Software Inc. CVE is in the CISA KEV catalogue.

Tracked since 19 Feb · latest article Thu 23 Jul · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 all time
High exploit odds: 0; ≥ p95, not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

No Foxit Software Inc. CVE is in the CISA KEV catalogue.

Products

2 products · 2 CVEs in coverage

PDF Editor1 CVEs · 0 in KEVlatest 23 Jul webplugins.foxit.com1 CVEs · 0 in KEVlatest 19 Feb

Coverage

2 articles · all timeFull timeline →

Two articles so far, 19 Feb to 23 Jul.

Thu 19 Feb · first reportThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ StoriesThe Hacker News
Thu 23 JulFoxit PDF Reader flaw lets users reach SYSTEM via CVE-2026-57239SecurityOnline

See the full timeline

23 JulFoxit PDF Reader flaw lets users reach SYSTEM via CVE-2026-57239SecurityOnline
19 FebThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ StoriesThe Hacker News

All CVEs in coverage

2

CVE-2025-66500Foxit webplugins.foxit.com Stored Cross-Site Scripting via postMessage VulnerabilityCVSSUnrated–Not in KEV0.2%EPSS1article

CVE-2026-57239Foxit Software Inc. Foxit PDF Editor vulnerabilityCVSS8.2High–Not in KEV0.2%EPSS1article

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

High exploit odds means FIRST EPSS percentile ≥ 95, excluding entries in CISA KEV.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.