Foxitsoftware maintains a focused line of PDF manipulation and viewing applications—including PhantomPDF, Foxit Reader, and related editors—that are widely deployed across enterprise and consumer environments despite a compact product portfolio. The vendor's vulnerability profile is characterized by memory-safety weaknesses endemic to native PDF processing, with recurring issues in use-after-free conditions, out-of-bounds access, and type-confusion flaws that reflect the complexity of parsing and rendering untrusted PDF documents. PDF readers represent a high-value target due to their ubiquity and frequent exposure to unvetted external files, making this vendor's disclosures relevant to a broad defender base even when product count is limited. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Foxitsoftware over time
Signals from CVEs in this vendor scope (1136 CVEs).
1,136 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-0837HIGH Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) ab | Mar 10, 2009 | 10.0 | 84 | NO | YES |
CVE-2018-9958HIGH This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerabil | May 17, 2018 | 8.8 | 79 | NO | YES |
CVE-2021-34833HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulner | Aug 4, 2021 | 7.8 | 76 | NO | NO |
CVE-2018-9948MEDIUM This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this v | May 17, 2018 | 6.5 | 75 | NO | YES |
CVE-2009-0836HIGH Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, | Mar 10, 2009 | 10.0 | 62 | NO | YES |
CVE-2020-13557HIGH A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of pre | Dec 22, 2020 | 8.8 | 60 | NO | NO |
CVE-2021-34847HIGH This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulner | Aug 4, 2021 | 7.8 | 58 | NO | NO |
CVE-2020-13548HIGH In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick th | Feb 10, 2021 | 8.8 | 57 | NO | NO |
CVE-2018-20247HIGH In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFr | Dec 24, 2018 | 7.8 | 53 | NO | NO |
CVE-2023-27363HIGH Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal | May 3, 2024 | 7.8 | 50 | NO | NO |
Signals from CVEs in this vendor scope (1136 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Foxitsoftware.
Media articles that mention a CVE ID that affects a product developed by Foxitsoftware — matched by CVE ID, not by vendor name.