CVE-2019-13332

CVE-2019-13332 is a remote code execution vulnerability affecting Foxit Reader 9.6.0.25114, specifically within its XFA form template processing. This flaw, stemming from a lack of object validation, allows an attacker to execute arbitrary code if a user opens a malicious file or visits a malicious page. With a CVSS score of 7.8 (High), it requires user interaction but can lead to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.