CVE-2019-17141

CVE-2019-17141 is a remote code execution vulnerability affecting Foxit PhantomPDF version 9.6.0.25114. It stems from insufficient validation of object existence during script processing within a text field's Calculate action, allowing an attacker to execute arbitrary code in the context of the current process. This high-severity vulnerability (CVSS 8.8) requires user interaction, such as opening a malicious file or visiting a malicious page. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, its FAUCET Risk Score is 70/100.