CVE-2026-18622 | Medium | 4.7 | 2026-08-13 | Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field d… |
CVE-2026-18597 | High | 8.5 | 2026-08-06 | The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an… |
CVE-2026-57260 | High | 7.8 | 2026-07-08 | The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object… |
CVE-2026-57259 | Medium | 6.5 | 2026-07-08 | The input file does not need to be strictly in a structurally valid PDF format. Instead, after reviewing the content, the original document disguised as a PDF… |
CVE-2026-57258 | Medium | 6.1 | 2026-07-08 | The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads… |
CVE-2026-57257 | Medium | 6.1 | 2026-07-08 | During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a… |
CVE-2026-57256 | High | 7.8 | 2026-07-08 | When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form… |
CVE-2026-57255 | Medium | 6.1 | 2026-07-08 | The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output is… |
CVE-2026-57254 | High | 7.8 | 2026-07-08 | There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checki… |
CVE-2026-57253 | Medium | 6.1 | 2026-07-08 | An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer pointer is used, res… |
CVE-2026-57252 | High | 7.8 | 2026-07-08 | When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel… |
CVE-2026-57251 | High | 7.8 | 2026-07-08 | The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bo… |
CVE-2026-57250 | High | 7.8 | 2026-07-08 | When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the ap… |
CVE-2026-57249 | High | 7.8 | 2026-07-08 | After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the r… |
CVE-2026-57248 | High | 7.8 | 2026-07-08 | When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument checks. As a result… |
CVE-2026-57247 | High | 7.8 | 2026-07-08 | The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before… |
CVE-2026-57246 | High | 7.8 | 2026-07-08 | When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin… |
CVE-2026-57245 | High | 7.8 | 2026-07-08 | When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationship… |
CVE-2026-57244 | High | 7.8 | 2026-07-08 | After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the c… |
CVE-2026-57243 | Medium | 6.1 | 2026-07-08 | During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page in… |
CVE-2026-57242 | High | 7.8 | 2026-07-08 | The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value val… |
CVE-2026-57241 | Medium | 6.1 | 2026-07-08 | The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related objects within the application to lose… |
CVE-2026-57240 | High | 7.8 | 2026-07-08 | When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid point… |
CVE-2026-57239 | High | 8.2 | 2026-07-08 | The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate t… |
CVE-2026-57238 | High | 7.8 | 2026-07-08 | After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the invalid object, which caused the appli… |
CVE-2026-57237 | High | 7.8 | 2026-07-08 | When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program… |
CVE-2026-13129 | High | 7.8 | 2026-07-08 | When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form obje… |
CVE-2026-13128 | High | 7.8 | 2026-07-08 | Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document vi… |
CVE-2026-13127 | High | 7.8 | 2026-07-08 | The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. Howe… |
CVE-2026-13126 | High | 7.8 | 2026-07-08 | The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up a… |
CVE-2026-12057 | High | 8.6 | 2026-06-15 | When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remot… |
CVE-2026-5943 | High | 7.8 | 2026-04-27 | Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document modification… |
CVE-2026-5942 | Medium | 5.5 | 2026-04-27 | Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalid… |
CVE-2026-5941 | High | 7.8 | 2026-04-27 | Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memor… |
CVE-2026-5940 | High | 7.8 | 2026-04-27 | Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes. |
CVE-2026-5939 | Medium | 5.5 | 2026-04-27 | A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code… |
CVE-2026-5938 | Medium | 5.5 | 2026-04-27 | Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of… |
CVE-2026-5937 | Medium | 5.5 | 2026-04-27 | Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultim… |
CVE-2026-5936 | High | 8.5 | 2026-04-13 | An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior… |
CVE-2026-4947 | High | 7.1 | 2026-04-01 | Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process. Under certain conditions, this issue… |
CVE-2026-3780 | High | 7.3 | 2026-04-01 | The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable… |
CVE-2026-3779 | High | 7.8 | 2026-04-01 | The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted docu… |
CVE-2026-3778 | Medium | 6.2 | 2026-04-01 | The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF. When pages and annotations are crafted that ref… |
CVE-2026-3777 | Medium | 5.5 | 2026-04-01 | The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state… |
CVE-2026-3776 | Medium | 5.5 | 2026-04-01 | The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources. When a PDF contains a stamp annota… |
CVE-2026-3775 | High | 7.8 | 2026-04-01 | The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privil… |
CVE-2026-3774 | Medium | 4.7 | 2026-04-01 | The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (O… |
CVE-2026-1592 | Medium | 6.3 | 2026-02-03 | Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded int… |
CVE-2026-1591 | Medium | 6.3 | 2026-02-03 | Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the u… |
CVE-2025-66523 | Medium | 6.1 | 2026-01-20 | URL parameters are directly embedded into JavaScript code or HTML attributes without proper encoding or sanitization. This allows attackers to inject arbitrary… |
CVE-2025-66522 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com). The application… |
CVE-2025-66521 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as t… |
CVE-2025-66520 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonline.foxit.com). User-supplied SVG files… |
CVE-2025-66519 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into t… |
CVE-2025-66502 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the templ… |
CVE-2025-66501 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of the Foxit eSign section. A crafted payloa… |
CVE-2025-66500 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in webplugins.foxit.com. A postMessage handler fails to validate the message origin and directly assig… |
CVE-2025-66499 | High | 7.8 | 2025-12-19 | A heap-based buffer overflow vulnerability exists in the PDF parsing of Foxit PDF Reader when processing specially crafted JBIG2 data. An integer overflow in t… |
CVE-2025-66498 | Medium | 5.3 | 2025-12-19 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing U3D data. When open… |
CVE-2025-66497 | Medium | 5.3 | 2025-12-19 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When open… |
CVE-2025-66496 | Medium | 5.3 | 2025-12-19 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When open… |
CVE-2025-66495 | High | 7.8 | 2025-12-19 | A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a P… |
CVE-2025-66494 | High | 7.8 | 2025-12-19 | A use-after-free vulnerability exists in the PDF file parsing of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows. A PDF object managed by multi… |
CVE-2025-66493 | High | 7.8 | 2025-12-19 | A use-after-free vulnerability exists in the AcroForm handling of Foxit PDF Reader and Foxit PDF Editor before 2025.2.1,14.0.1 and 13.2.1
on Windows
. When… |
CVE-2025-13941 | High | 8.8 | 2025-12-19 | A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system permissions… |