CVE-2022-28679 is a high-severity arbitrary code execution vulnerability affecting Foxit PDF Reader 11.2.1.53537 and related Foxit products on Windows. It stems from improper validation of Annotation objects, allowing an attacker to execute code in the context of the current user. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. There is currently no public exploit code, evidence of active exploitation, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.1.7.37777CPE matchmatch criteria | cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:* | ||
>= 11.0, <= 11.2.1.53537CPE matchmatch criteria | cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:* | ||
<= 11.2.1.53537CPE matchmatch criteria | cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.